PT-2011-3531 · Microsoft · Windows Vista+11

Published 2011-09-15 · Updated 2023-12-07 · CVE-2011-1991

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1

Description The issue allows local users to gain privileges via a Trojan horse DLL in the current working directory. This can be demonstrated by a directory containing certain file types, such as .doc, .rtf, or .txt files. The vulnerability is related to insecure library loading in various Windows components, including the Display Panning CPL Extension, EAPHost Authenticator Service, Folder Redirection, HyperTerminal, Japanese Input Method Editor (IME), and Microsoft Management Console (MMC). A remote code execution vulnerability exists in the way certain Windows components handle the loading of DLL files, potentially allowing an attacker to take complete control of an affected system.

Recommendations For Microsoft Windows XP versions SP2 through SP3, consider disabling the deskpan.dll in the Display Panning CPL Extension as a temporary workaround. For Microsoft Windows Server 2003 version SP2, restrict access to the EAPHost Authenticator Service to minimize the risk of exploitation. For Microsoft Windows Vista version SP2, avoid using the Folder Redirection feature until the issue is resolved. For Microsoft Windows Server 2008 versions SP2 through R2 SP1, consider disabling the HyperTerminal feature as a temporary mitigation measure. For Microsoft Windows 7 versions Gold through SP1, restrict access to the Japanese Input Method Editor (IME) to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2011-1991

Affected Products

Display Panning Cpl Extension

Eaphost Authenticator Service

Folder Redirection

Hyperterminal

Japanese Input Method Editor

Management Console

Windows

Windows 7

Windows Server 2003

Windows Server 2008

Windows Vista

Windows Xp

References · 6

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1991 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-1991 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-071 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12871 · Note
• http://us-cert.gov/cas/techalerts/TA11-256A.html · Note
• http://technet.microsoft.com/en-us/security/bulletin/MS11-071 · Note