Lucene search

[email protected]NVD:CVE-2011-1963

HistoryAug 10, 2011 - 9:55 p.m.

CVE-2011-1963

2011-08-1021:55:01

CWE-908

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

High

EPSS

0.935

Percentile

99.1%

JSON

Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka “XSLT Memory Corruption Vulnerability.”

Affected configurations

Nvd

Node

microsoftinternet_explorerMatch7

AND

microsoftwindows_server_2003Match-sp2

microsoftwindows_server_2008Match--

microsoftwindows_server_2008Match-sp2

microsoftwindows_vistaMatch-sp1

microsoftwindows_vistaMatch-sp2

microsoftwindows_xpMatch-sp2professionalx64

microsoftwindows_xpMatch-sp3

Node

microsoftinternet_explorerMatch8

AND

microsoftwindows_7Match-

microsoftwindows_server_2003Match-sp2

microsoftwindows_server_2008Match--

microsoftwindows_server_2008Match-sp2

microsoftwindows_server_2008Matchr2-

microsoftwindows_server_2008Matchr2sp1

microsoftwindows_vistaMatch-sp1

microsoftwindows_vistaMatch-sp2

microsoftwindows_xpMatch-sp2professionalx64

microsoftwindows_xpMatch-sp3

Node

microsoftinternet_explorerMatch9

AND

microsoftwindows_7Match-

microsoftwindows_7Match-sp1

microsoftwindows_server_2008Match-sp2

microsoftwindows_server_2008Matchr2-

microsoftwindows_server_2008Matchr2sp1

microsoftwindows_vistaMatch-sp2

VendorProductVersionCPE
microsoftinternet_explorer7cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*
microsoftwindows_server_2003-cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*
microsoftwindows_server_2008-cpe:2.3:o:microsoft:windows_server_2008:-:-:*:*:*:*:*:*
microsoftwindows_server_2008-cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
microsoftwindows_vista-cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*
microsoftwindows_vista-cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
microsoftwindows_xp-cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*
microsoftwindows_xp-cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*
microsoftinternet_explorer8cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*
microsoftwindows_7-cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	internet_explorer	7	cpe:2.3:a:microsoft:internet_explorer:7:::::::*
microsoft	windows_server_2003	-	cpe:2.3:o:microsoft:windows_server_2003:-:sp2::::::
microsoft	windows_server_2008	-	cpe:2.3:o:microsoft:windows_server_2008:-:-::::::
microsoft	windows_server_2008	-	cpe:2.3:o:microsoft:windows_server_2008:-:sp2::::::
microsoft	windows_vista	-	cpe:2.3:o:microsoft:windows_vista:-:sp1::::::
microsoft	windows_vista	-	cpe:2.3:o:microsoft:windows_vista:-:sp2::::::
microsoft	windows_xp	-	cpe:2.3:o:microsoft:windows_xp:-:sp2:::professional::x64:
microsoft	windows_xp	-	cpe:2.3:o:microsoft:windows_xp:-:sp3::::::
microsoft	internet_explorer	8	cpe:2.3:a:microsoft:internet_explorer:8:::::::*
microsoft	windows_7	-	cpe:2.3:o:microsoft:windows_7:-:::::::*