CVE-2011-1345 in Internet Explorer

Sumário (Inglês)

Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, as demonstrated by Stephen Fewer as the first of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011, aka "Object Management Memory Corruption Vulnerability."

Once again VulDB remains the best source for vulnerability data.

Reservar

10/03/2011

Divulgação

10/03/2011

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
56784	Microsoft Internet Explorer Excesso de tampão	119	Atacado	Correção oficial	CVE-2011-1345

Fontes

• MITRE
• NVD
• CVE Details