NVD

Id
11306  
Name
CVE-2011-5046  
Description
The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted data, as demonstrated by a large height attribute of an IFRAME element rendered by Safari, aka "GDI Access Violation Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-12-30  
Modified Date
2013-07-19  
Seq
2011-5046  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
62492 11306 CVE-2011-5046 oval:org.mitre.oval:def:14603  View
62493 11306 CVE-2011-5046 MS12-008  View
62494 11306 CVE-2011-5046 http://twitter.com/w3bd3vil/statuses/148454992989261824  View
62495 11306 CVE-2011-5046 18275  View
62496 11306 CVE-2011-5046 1026450  View
62497 11306 CVE-2011-5046 TA12-045A  View
62498 11306 CVE-2011-5046 ms-win32k-iframe-code-exec(71873)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33359 JVNDB-2011-003599 Microsoft Windows 7 Professional 64-bit におけるサービス運用妨害 (DoS) の脆弱性 Microsoft Windows 7 Professional 64-bit の kernel-mode ドライバの win32k.sys は、Apple Safari を使用しているとき、サービス運用妨害 (メモリ破損) 状態となる、および任意のコードを実行される脆弱性が存在します。 CVE-2011-5046 52953 CVE-2011-5046 11306 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003599.html 2011-12-30 2012-02-16 View