Microsoft Security Advisory 2639658
Summary: Microsoft added an Advisory Initiative to its MAPP program giving partners up to 96 hours to build protection for newly disclosed vulnerabilities, and piloted it with an advisory on the Win32K TrueType font parsing engine flaw tied to Duqu (CVE-2011-3402). Sourcefire released protections within the first 48 hours, listed as GID 3, SID 20539, while Microsoft reported low customer impact at the time.
Bottom line: Duqu exploits the font parsing flaw to open a tunnel into a user's machine, after which an attacker can run arbitrary code, modify data, and install applications as the user would - and the flaw is exploitable across many Windows platforms despite Microsoft's earlier workaround.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2011-3402
- Related
- CVE-2011-3402: Microsoft Windows Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Oct 06, 2025Crimeware Author Funds Exploit Buying Spree Cyber Risks ·Styx Exploit Pack: Domo Arigato, PC Roboto Cyber Risks ·