CVE-2011-0347

Sažetak

Microsoft Internet Explorer on Windows XP allows remote attackers to trigger an incorrect GUI display and have unspecified other impact via vectors related to the DOM implementation, as demonstrated by cross_fuzz.

Reference

http://lcamtuf.coredump.cx/cross_fuzz/fuzzer_timeline.txt
http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0698.html
http://lcamtuf.coredump.cx/cross_fuzz/msie_display.jpg
http://www.microsoft.com/technet/security/advisory/2490606.mspx
http://lcamtuf.blogspot.com/2011/01/announcing-crossfuzz-potential-0-day-in.html
http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx
https://exchange.xforce.ibmcloud.com/vulnerabilities/64571
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12514
http://www.securityfocus.com/archive/1/515506/100/0/threaded

CVSS

Base:	9.3
Impact:	10.0
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:M/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

23-07-2021 - 15:12

Objavljeno

07-01-2011 - 23:00