CVE-2011-2019

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 14-12-2011 01:55

Last modified: - 01-03-2022 03:50

Total changes: - 2

Description

Untrusted search path vulnerability in Microsoft Internet Explorer 9 on Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an HTML file, aka "Internet Explorer Insecure Library Loading Vulnerability."

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:C/I:C/A:C

Low

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Privileges required

Scope

User interaction

9.3

Base score

8.6

10.0

Exploitability score

Impact score

Verification logic

AND

vendor=microsoft AND product=internet_explorer AND version=9

vendor=microsoft AND product=windows_7 AND version=-

vendor=microsoft AND product=windows_7 AND version=- AND update=sp1

vendor=microsoft AND product=windows_server_2008 AND version=r2 AND update=-

vendor=microsoft AND product=windows_server_2008 AND version=r2 AND update=sp1

Reference

TA11-347A-Third Party Advisory, US Government Resource
oval:org.mitre.oval:def:13884-Tool Signature
MS11-099-Patch, Vendor Advisory

Keywords

CVE-2011-2019

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2011-2019

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures