[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyRSHQXNu0YJPL5mrpt3S4ZnY3CZBuaaz8NWn2trhjGw":3,"g5a-risk:CVE-2011-3402":262},{"success":4,"data":5,"meta":260},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":27,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":69,"references":70,"referencesCount":190,"weaknesses":191,"weaknessesCount":195,"isActivelyExploited":4,"cisaInfo":196,"otxData":27,"relatedBlogPosts":197,"seoMetadata":198,"configurations":223,"relatedVendorCves":251,"notableEvents":252},"CVE-2011-3402","What is CVE-2011-3402?","Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page, as exploited in the wild in November 2011 by Duqu, aka \"TrueType Font Parsing Vulnerability.\"","Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 20...","2011-11-04T21:55:04.693","2026-06-16T23:33:14.02",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":47},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,2.8,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[36],{"Source":17,"Type":18,"CVSSData":37,"BaseSeverity":26,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":46,"ObtainAllPrivilege":46,"ObtainUserPrivilege":46,"ObtainOtherPrivilege":46,"UserInteractionRequired":4},{"Version":38,"VectorString":39,"AccessVector":21,"AccessComplexity":40,"Authentication":23,"ConfidentialityImpact":41,"IntegrityImpact":41,"AvailabilityImpact":41,"BaseScore":42,"BaseSeverity":43,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","MEDIUM","COMPLETE",9.3,"",8.6,10,false,[],0.78138,[48,48,48,48,48,48,48],"High",[52,57,60,63,66],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"microsoft","windows_7","-","cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",{"vendor":53,"product":58,"version":55,"criteria":59,"vulnerable":4},"windows_server_2003","cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*",{"vendor":53,"product":61,"version":55,"criteria":62,"vulnerable":4},"windows_server_2008","cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",{"vendor":53,"product":64,"version":55,"criteria":65,"vulnerable":4},"windows_vista","cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",{"vendor":53,"product":67,"version":55,"criteria":68,"vulnerable":4},"windows_xp","cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",5,[71,76,81,86,90,93,97,102,106,110,113,118,121,124,127,130,133,136,140,143,146,148,150,152,154,156,158,160,162,164,166,168,170,172,174,176,178,180,182,184,186],{"url":72,"source":73,"tags":74},"http:\u002F\u002Fblogs.mcafee.com\u002Fmcafee-labs\u002Fthe-day-of-the-golden-jackal-%E2%80%93-further-tales-of-the-stuxnet-files","Mcafee",[75],"Broken Link",{"url":77,"source":78,"tags":79},"http:\u002F\u002Fblogs.technet.com\u002Fb\u002Fmsrc\u002Farchive\u002F2011\u002F11\u002F03\u002Fmicrosoft-releases-security-advisory-2639658.aspx","Technet",[80],"Vendor Advisory",{"url":82,"source":83,"tags":84},"http:\u002F\u002Fisc.sans.edu\u002Fdiary\u002FDuqu+Mitigation\u002F11950","Sans",[85],"Third Party Advisory",{"url":87,"source":88,"tags":89},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F49121","Secunia",[80],{"url":91,"source":88,"tags":92},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F49122",[80],{"url":94,"source":95,"tags":96},"http:\u002F\u002Ftechnet.microsoft.com\u002Fsecurity\u002Fadvisory\u002F2639658","Microsoft",[80],{"url":98,"source":99,"tags":100},"http:\u002F\u002Fwww.securelist.com\u002Fen\u002Fblog\u002F208193197\u002FThe_Mystery_of_Duqu_Part_Two","Securelist",[101],"Not Applicable",{"url":103,"source":104,"tags":105},"http:\u002F\u002Fwww.securitytracker.com\u002Fid?1027039","Securitytracker",[75],{"url":107,"source":108,"tags":109},"http:\u002F\u002Fwww.symantec.com\u002Fconnect\u002Fw32-duqu_status-updates_installer-zero-day-exploit","Symantec",[101],{"url":111,"source":108,"tags":112},"http:\u002F\u002Fwww.symantec.com\u002Fcontent\u002Fen\u002Fus\u002Fenterprise\u002Fmedia\u002Fsecurity_response\u002Fwhitepapers\u002Fw32_duqu_the_precursor_to_the_next_stuxnet.pdf",[101],{"url":114,"source":115,"tags":116},"http:\u002F\u002Fwww.us-cert.gov\u002Fcas\u002Ftechalerts\u002FTA11-347A.html","Us-cert",[117],"US Government Resource",{"url":119,"source":115,"tags":120},"http:\u002F\u002Fwww.us-cert.gov\u002Fcas\u002Ftechalerts\u002FTA12-129A.html",[117],{"url":122,"source":115,"tags":123},"http:\u002F\u002Fwww.us-cert.gov\u002Fcas\u002Ftechalerts\u002FTA12-164A.html",[117],{"url":125,"source":115,"tags":126},"http:\u002F\u002Fwww.us-cert.gov\u002Fcontrol_systems\u002Fpdf\u002FICS-ALERT-11-291-01E.pdf",[117],{"url":128,"source":95,"tags":129},"https:\u002F\u002Fdocs.microsoft.com\u002Fen-us\u002Fsecurity-updates\u002Fsecuritybulletins\u002F2011\u002Fms11-087",[80],{"url":131,"source":95,"tags":132},"https:\u002F\u002Fdocs.microsoft.com\u002Fen-us\u002Fsecurity-updates\u002Fsecuritybulletins\u002F2012\u002Fms12-034",[80],{"url":134,"source":95,"tags":135},"https:\u002F\u002Fdocs.microsoft.com\u002Fen-us\u002Fsecurity-updates\u002Fsecuritybulletins\u002F2012\u002Fms12-039",[80],{"url":137,"source":138,"tags":139},"https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A13998","Cisecurity",[75],{"url":141,"source":138,"tags":142},"https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A15290",[75],{"url":144,"source":138,"tags":145},"https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A15645",[75],{"url":72,"source":73,"tags":147},[75],{"url":77,"source":78,"tags":149},[80],{"url":82,"source":83,"tags":151},[85],{"url":87,"source":88,"tags":153},[80],{"url":91,"source":88,"tags":155},[80],{"url":94,"source":95,"tags":157},[80],{"url":98,"source":99,"tags":159},[101],{"url":103,"source":104,"tags":161},[75],{"url":107,"source":108,"tags":163},[101],{"url":111,"source":108,"tags":165},[101],{"url":114,"source":115,"tags":167},[117],{"url":119,"source":115,"tags":169},[117],{"url":122,"source":115,"tags":171},[117],{"url":125,"source":115,"tags":173},[117],{"url":128,"source":95,"tags":175},[80],{"url":131,"source":95,"tags":177},[80],{"url":134,"source":95,"tags":179},[80],{"url":137,"source":138,"tags":181},[75],{"url":141,"source":138,"tags":183},[75],{"url":144,"source":138,"tags":185},[75],{"url":187,"source":188,"tags":189},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2011-3402","CISA",[117],41,[192],{"id":193,"name":193,"description":194},"Unknown","NVD-CWE-noinfo",1,{"shortDescription":43,"requiredAction":43,"vulnerabilityName":43,"dateAdded":27},[],{"title":199,"metaDescription":200,"keywords":201,"canonicalUrl":202,"structuredData":203},"What is CVE-2011-3402? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2011-3402, a high severity cyber security vulnerability from 2011. High exploit probability (78.1%). Unspecified vulnerability ...","CVE-2011-3402, CVE-2011-3402 vulnerability, CVE-2011-3402 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2011, CVSS score, exploit, patch, remediation, microsoft security, windows_7 vulnerability, windows_server_2003 vulnerability, windows_server_2008 vulnerability, windows_vista vulnerability, windows_xp vulnerability, high risk vulnerability, actively exploited","\u002Fwhat-is\u002Fcve-2011-3402",{"@context":204,"@type":205,"headline":199,"description":200,"datePublished":10,"dateModified":11,"author":206,"publisher":210,"about":214,"mainEntityOfPage":218,"articleSection":221,"keywords":222},"https:\u002F\u002Fschema.org","TechArticle",{"@type":207,"name":208,"url":209},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":207,"name":208,"url":209,"logo":211},{"@type":212,"url":213},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":215,"name":6,"description":216,"additionalType":217},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":219,"@id":220},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2011-3402","Cybersecurity","CVE-2011-3402, CVE-2011-3402 vulnerability, CVE-2011-3402 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[224],{"Operator":27,"Negate":27,"Nodes":225},[226],{"Operator":227,"Negate":46,"CPEMatch":228},"OR",[229,231,234,236,238,241,244,246,248],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":230,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7FE8B00B-4F39-4755-A323-8AD71F5E3EBE",{"Vulnerable":4,"Criteria":232,"MatchCriteriaID":233,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*","06BBFA69-94E2-4BAB-AFD3-BC434B11D106",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":235,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":237,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"5F422A8C-2C4E-42C8-B420-E0728037E15C",{"Vulnerable":4,"Criteria":239,"MatchCriteriaID":240,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*","2127D10C-B6F3-4C1D-B9AA-5D78513CC996",{"Vulnerable":4,"Criteria":242,"MatchCriteriaID":243,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*","AB425562-C0A0-452E-AABE-F70522F15E1A",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":245,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":247,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3",{"Vulnerable":4,"Criteria":249,"MatchCriteriaID":250,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9",[],[253],{"id":254,"eventType":255,"eventTime":256,"details":257,"label":258,"color":259},"ac4d440b-8104-4a1f-a863-83ae6d164c17","NEW_CISA","2025-10-07T04:01:09.806576+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"lastModified":11,"cacheTime":261,"version":38},1792250613778,{"score":263,"band":50,"action":264,"scoredAt":265},79,"Emergency patch","2026-10-17T06:38:27.650368+00:00"]