Lucene search

K
cve[email protected]CVE-2011-1998
HistoryOct 12, 2011 - 2:52 a.m.

CVE-2011-1998

2011-10-1202:52:43
CWE-908
web.nvd.nist.gov
25
cve-2011-1998
microsoft
internet explorer
remote code execution
vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

Low

0.273 Low

EPSS

Percentile

96.8%

Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that was not properly initialized, aka “Jscript9.dll Remote Code Execution Vulnerability.”

Affected configurations

NVD
Node
microsoftinternet_explorerMatch9
AND
microsoftwindows_7Match-
OR
microsoftwindows_7Match-sp1
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_server_2008Matchr2-
OR
microsoftwindows_server_2008Matchr2sp1
OR
microsoftwindows_vistaMatch-sp2

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

Low

0.273 Low

EPSS

Percentile

96.8%