Lucene search

K
cvelistMitreCVELIST:CVE-2011-4434
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-4434

2022-10-0316:15:14
mitre
www.cve.org
microsoft
windows server
windows 7
applocker
bypass
macro
scripting
application
access restrictions
microsoft office
sandbox_inert
load_ignore_code_authz_level

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.8%

Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 do not properly enforce AppLocker rules, which allows local users to bypass intended access restrictions via a (1) macro or (2) scripting feature in an application, as demonstrated by Microsoft Office applications and the SANDBOX_INERT and LOAD_IGNORE_CODE_AUTHZ_LEVEL flags.

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.8%

Related for CVELIST:CVE-2011-4434