PT-2011-3076 · Microsoft · Internet Explorer
Stephen Fewer
·
Publicado
2011-03-10
·
Atualizado
2021-07-23
·
CVE-2011-1345
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft Internet Explorer versions 6 through 8
Description
A remote code execution issue exists due to improper handling of objects in memory. This allows attackers to execute arbitrary code by accessing an object that was not properly initialized or has been deleted. An attacker could exploit this by constructing a specially crafted Web page, potentially gaining the same user rights as the logged-on user. If the user has administrative rights, the attacker could take complete control of the system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights.
Recommendations
For Microsoft Internet Explorer versions 6 through 8, consider applying security updates or patches that address the object management memory corruption issue to prevent remote code execution.
As a temporary workaround, consider restricting access to specially crafted Web pages that could exploit the vulnerability until a patch is available.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Internet Explorer