PT-2011-3076 · Microsoft · Internet Explorer

Stephen Fewer · Published 2011-03-10 · Updated 2021-07-23 · CVE-2011-1345

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 8

Description A remote code execution issue exists due to improper handling of objects in memory. This allows attackers to execute arbitrary code by accessing an object that was not properly initialized or has been deleted. An attacker could exploit this by constructing a specially crafted Web page, potentially gaining the same user rights as the logged-on user. If the user has administrative rights, the attacker could take complete control of the system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Internet Explorer versions 6 through 8, consider applying security updates or patches that address the object management memory corruption issue to prevent remote code execution. As a temporary workaround, consider restricting access to specially crafted Web pages that could exploit the vulnerability until a patch is available.

Fix

Related Identifiers

CVE-2011-1345

ZDI-11-119

Affected Products

Internet Explorer

References · 18

• https://nvd.nist.gov/vuln/detail/CVE-2011-1345 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-11-119 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-018 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1345 · Security Note
• http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011 · Note
• http://computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own · Note
• http://us-cert.gov/cas/techalerts/TA11-102A.html · Note
• http://twitter.com/msftsecresponse/statuses/45646985998516224 · Note
• https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66062 · Note
• http://securityfocus.com/bid/46821# · Note
• http://xforce.iss.net/xforce/xfdb/66062 · Note
• http://zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367 · Note
• http://securitytracker.com/id?1025327 · Note
• http://securityfocus.com/bid/46821 · Note