CVE-2011-4434

2022-10-0316:15:14

CWE-264

[email protected]

web.nvd.nist.gov

cve-2011-4434

microsoft

windows server 2008 r2

windows 7

sp1

applocker

access restrictions

macro

scripting

nvd

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

23.8%

JSON

Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 do not properly enforce AppLocker rules, which allows local users to bypass intended access restrictions via a (1) macro or (2) scripting feature in an application, as demonstrated by Microsoft Office applications and the SANDBOX_INERT and LOAD_IGNORE_CODE_AUTHZ_LEVEL flags.

Affected configurations

NVD

Node

microsoftwindows_7

microsoftwindows_7Match-

microsoftwindows_7Match-sp1x64

microsoftwindows_7Match-sp1x86

microsoftwindows_server_2008Matchr2

microsoftwindows_server_2008Matchr2sp1

VendorProductVersionCPE
microsoftwindows_server_2008r2cpe:/o:microsoft:windows_server_2008:r2:::
microsoftwindows_7cpe:/o:microsoft:windows_7::::
microsoftwindows_server_2008r2cpe:/o:microsoft:windows_server_2008:r2:sp1::
microsoftwindows_7-cpe:/o:microsoft:windows_7:-:sp1::
microsoftwindows_7-cpe:/o:microsoft:windows_7:-:::

Vendor	Product	Version	CPE
microsoft	windows_server_2008	r2	cpe:/o:microsoft:windows_server_2008:r2:::
microsoft	windows_7		cpe:/o:microsoft:windows_7::::
microsoft	windows_server_2008	r2	cpe:/o:microsoft:windows_server_2008:r2:sp1::
microsoft	windows_7	-	cpe:/o:microsoft:windows_7:-:sp1::
microsoft	windows_7	-	cpe:/o:microsoft:windows_7:-:::