Lucene search
MicrosoftCVE-2011-1260HistoryJun 16, 2011 - 8:55 p.m.
CVE-2011-1260
2011-06-1620:55:01
CWE-119
microsoft
web.nvd.nist.gov
40
cve-2011-1260
microsoft internet explorer
memory corruption
remote code execution
vulnerability
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.973
Percentile
99.9%
Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka “Layout Memory Corruption Vulnerability.”
Affected configurations
Node
microsoftinternet_explorerMatch8
microsoftwindows_2003_serversp2itanium
ORmicrosoftwindows_7
ORmicrosoftwindows_7Match-
ORmicrosoftwindows_server_2003sp2
ORmicrosoftwindows_server_2008itanium
ORmicrosoftwindows_server_2008x32
ORmicrosoftwindows_server_2008x64
ORmicrosoftwindows_server_2008r2itanium
ORmicrosoftwindows_server_2008r2x64
ORmicrosoftwindows_server_2008sp2x32
ORmicrosoftwindows_server_2008sp2x64
ORmicrosoftwindows_server_2008Match-sp2itanium
ORmicrosoftwindows_vistasp1
ORmicrosoftwindows_vistasp2
ORmicrosoftwindows_vistaMatch-sp1
ORmicrosoftwindows_xpsp3
ORmicrosoftwindows_xpMatch-sp2x64
Node
microsoftinternet_explorerMatch9
microsoftwindows_7Match-
ORmicrosoftwindows_7Match-sp1x64
ORmicrosoftwindows_7Match-sp1x86
ORmicrosoftwindows_server_2008sp2x32
ORmicrosoftwindows_server_2008sp2x64
ORmicrosoftwindows_server_2008Matchr2x64
ORmicrosoftwindows_vistasp2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | internet_explorer | 8 | cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:* |
| microsoft | windows_2003_server | * | cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:* |
| microsoft | windows_7 | * | cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:* |
| microsoft | windows_7 | - | cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:* |
| microsoft | windows_server_2003 | * | cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:* |
| microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:* |
| microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:* |
| microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:* |
| microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:* |
| microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:* |
Related
metasploit
metasploit
MS11-050 IE mshtml!CObjectElement Use After Free
2011-06-17 00:56:11
saint
saint
checkpoint_advisories
checkpoint_advisories
Internet Explorer Layout Object Memory Corruption (MS11-050; CVE-2011-1260)
2011-06-14 00:00:00
cvelist
cvelist
CVE-2011-1260
2011-06-16 20:21:00
securityvulns
securityvulns
nvd
nvd
CVE-2011-1260
2011-06-16 20:55:01
prion
prion
Memory corruption
2011-06-16 20:55:00
zdi
zdi
threatpost
threatpost
Researcher Finds Technique to Bypass Microsoft's EMET Protections
2012-08-09 14:28:45
exploitdb
exploitdb
openvas
openvas
Microsoft Internet Explorer Multiple Vulnerabilities (2530548)
2011-06-15 00:00:00
Microsoft Internet Explorer Multiple Vulnerabilities (2530548)
2011-06-15 00:00:00
mskb
mskb
MS11-050: Cumulative Security Update for Internet Explorer: June 14, 2011
2011-06-14 00:00:00
nessus
nessus
MS11-050: Cumulative Security Update for Internet Explorer (2530548)
2011-06-15 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.973
Percentile
99.9%
Related for CVE-2011-1260