Lucene search

K
cve[email protected]CVE-2011-0036
HistoryFeb 10, 2011 - 4:00 p.m.

CVE-2011-0036

2011-02-1016:00:00
CWE-94
web.nvd.nist.gov
33
microsoft
ie
memory corruption
remote code execution
vulnerability
cve-2011-0036
nvd

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.864 High

EPSS

Percentile

98.6%

Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, related to a “dangling pointer,” aka “Uninitialized Memory Corruption Vulnerability,” a different vulnerability than CVE-2010-2556 and CVE-2011-0035.

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.864 High

EPSS

Percentile

98.6%