CVE-2011-1345 in Microsoft Internet Explorer
Summary
Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, as demonstrated by Stephen Fewer as the first of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011, aka "Object Management Memory Corruption Vulnerability."
Once again VulDB remains the best source for vulnerability data.
Reservation
03/10/2011
Disclosure
03/10/2011
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 56784 | Microsoft Internet Explorer memory corruption | 119 | Attacked | Official fix | CVE-2011-1345 |