PT-2011-2982 · Microsoft · Internet Explorer

David Bloom · Published 2011-04-13 · Updated 2022-02-28 · CVE-2011-1244

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 8

Description The issue allows remote attackers to obtain sensitive information or conduct clickjacking attacks via a crafted web site. An attacker could exploit this by constructing a specially crafted Web page disguised as legitimate content. The user's actions on the page could allow information disclosure or clickjacking, whereby the user's clicks perform unwanted actions.

Recommendations For Microsoft Internet Explorer versions 6 through 8, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Clickjacking

Weakness Enumeration

CWE-1021

Related Identifiers

CVE-2011-1244

Affected Products

Internet Explorer

References · 8

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1244 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-1244 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-018 · Vendor Advisory
• http://securitytracker.com/id?1025327 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11926 · Note
• http://securityfocus.com/bid/47191 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2011/MS11-018 · Note
• http://osvdb.org/71777 · Note