Lucene search
MicrosoftCVE-2011-1256HistoryJun 16, 2011 - 8:55 p.m.
CVE-2011-1256
2011-06-1620:55:01
CWE-908
microsoft
web.nvd.nist.gov
36
cve-2011-1256
microsoft
internet explorer
memory corruption
remote code execution
dom
vulnerability
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.886
Percentile
98.7%
Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka βDOM Modification Memory Corruption Vulnerability.β
Affected configurations
Node
microsoftinternet_explorerMatch6
microsoftwindows_server_2003Match-sp2
ORmicrosoftwindows_xpMatch-sp2x64
ORmicrosoftwindows_xpMatch-sp3
Node
microsoftinternet_explorerMatch7
microsoftwindows_server_2003Match-sp2
ORmicrosoftwindows_server_2008Match--
ORmicrosoftwindows_server_2008Match-sp2
ORmicrosoftwindows_vistaMatch-sp1
ORmicrosoftwindows_vistaMatch-sp2
ORmicrosoftwindows_xpMatch-sp2professionalx64
ORmicrosoftwindows_xpMatch-sp3
Node
microsoftinternet_explorerMatch8
microsoftwindows_7Match-
ORmicrosoftwindows_server_2003Match-sp2
ORmicrosoftwindows_server_2008Match--
ORmicrosoftwindows_server_2008Match-sp2
ORmicrosoftwindows_server_2008Matchr2
ORmicrosoftwindows_vistaMatch-sp1
ORmicrosoftwindows_vistaMatch-sp2
ORmicrosoftwindows_xpMatch-sp2professionalx64
ORmicrosoftwindows_xpMatch-sp3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | internet_explorer | 6 | cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:* |
| microsoft | windows_server_2003 | - | cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:* |
| microsoft | windows_xp | - | cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:x64:* |
| microsoft | windows_xp | - | cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:* |
| microsoft | internet_explorer | 7 | cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:* |
| microsoft | windows_server_2008 | - | cpe:2.3:o:microsoft:windows_server_2008:-:-:*:*:*:*:*:* |
| microsoft | windows_server_2008 | - | cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* |
| microsoft | windows_vista | - | cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:* |
| microsoft | windows_vista | - | cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:* |
| microsoft | windows_xp | - | cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:* |
Related
checkpoint_advisories
checkpoint_advisories
nvd
nvd
CVE-2011-1256
2011-06-16 20:55:01
zdi
zdi
cvelist
cvelist
CVE-2011-1256
2011-06-16 20:21:00
seebug
seebug
securityvulns
securityvulns
saint
saint
Internet Explorer DOM modification memory corruption
2011-06-28 00:00:00
Internet Explorer DOM modification memory corruption
2011-06-28 00:00:00
Internet Explorer DOM modification memory corruption
2011-06-28 00:00:00
prion
prion
Memory corruption
2011-06-16 20:55:00
packetstorm
packetstorm
MS11-050 IE mshtml!CObjectElement Use After Free
2011-06-17 00:00:00
zdt
zdt
MS11-050 IE mshtml!CObjectElement Use After Free
2011-06-17 00:00:00
exploitdb
exploitdb
nessus
nessus
MS11-050: Cumulative Security Update for Internet Explorer (2530548)
2011-06-15 00:00:00
openvas
openvas
Microsoft Internet Explorer Multiple Vulnerabilities (2530548)
2011-06-15 00:00:00
Microsoft Internet Explorer Multiple Vulnerabilities (2530548)
2011-06-15 00:00:00
mskb
mskb
MS11-050: Cumulative Security Update for Internet Explorer: June 14, 2011
2011-06-14 00:00:00
threatpost
threatpost
ExploitHub Offering Bounties β And Residuals β for Exploits
2011-10-05 13:11:31
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.886
Percentile
98.7%
Related for CVE-2011-1256