CVE-2011-0346
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
33Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.1epss 31%
Use-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the DOM implementation and the BreakAASpecial and BreakCircularMemoryReferences functions, as demonstrated by cross_fuzz, aka "MSHTML Memory Corruption Vulnerability."
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
n/a · n/aReferências
http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0698.htmlhttp://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspxhttp://lcamtuf.blogspot.com/2011/01/announcing-crossfuzz-potential-0-day-in.htmlhttp://lcamtuf.coredump.cx/cross_fuzz/fuzzer_timeline.txthttp://lcamtuf.coredump.cx/cross_fuzz/known_vuln.txthttp://lcamtuf.coredump.cx/cross_fuzz/msie_crash.txthttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-018https://exchange.xforce.ibmcloud.com/vulnerabilities/64482https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11882http://www.kb.cert.org/vuls/id/427980http://www.securityfocus.com/archive/1/515506/100/0/threadedhttp://www.securityfocus.com/bid/45639