Lucene search
PRIOn knowledge basePRION:CVE-2011-4434HistoryNov 11, 2011 - 9:55 p.m.
Design/Logic Flaw
2011-11-1121:55:00
PRIOn knowledge base
www.prio-n.com
1
Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 do not properly enforce AppLocker rules, which allows local users to bypass intended access restrictions via a (1) macro or (2) scripting feature in an application, as demonstrated by Microsoft Office applications and the SANDBOX_INERT and LOAD_IGNORE_CODE_AUTHZ_LEVEL flags.
| CPE | Name | Operator | Version |
|---|---|---|---|
| windows_7 | eq | sp1x86 | |
| windows_7 | eq | sp1x64 | |
| windows_server_2008 | eq | 2.0.114 | |
| windows_server_2008 | eq | r2 sp1 |
References
Related
cve
cve
CVE-2011-4434
2022-10-03 16:15:14
nessus
nessus
MS KB2532445: AppLocker Rules Bypass
2013-10-11 00:00:00
cvelist
cvelist
CVE-2011-4434
2022-10-03 16:15:14
nvd
nvd
CVE-2011-4434
2011-11-11 21:55:01
seebug
seebug
Microsoft Windows AppLocker规则本地安全绕过漏洞(CVE-2011-4434)
2011-11-16 00:00:00