CVE-2011-2010 in Office

摘要

由 VulDB • 2026-06-22

Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME 2010、Office Pinyin SimpleFast Style 2010 和 Office Pinyin New Experience Style 2010 未能正确限制对配置选项的访问，这允许本地用户通过 Microsoft Pinyin（又名 MSPY）IME 工具栏提升权限，即“Pinyin IME Elevation Vulnerability”。

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• 预定: 2011-05-09
• 披露: 2011-12-13
• 管理: 已接受
• 条目: VDB-4472
• CPE: 准备好
• CWE: CWE-264 (已确认)
• CVSS: 7.2 (NVD)
• EPSS: 0.01801
• KEV: 否
• 活动: 非常低
• 部门: Finance, Homeoffice, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-2010
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-2010
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-2010/