NVD

Id
8303  
Name
CVE-2011-1345  
Description
Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, as demonstrated by Stephen Fewer as the first of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011, aka "Object Management Memory Corruption Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-03-10  
Modified Date
2011-10-04  
Seq
2011-1345  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
47631 8303 CVE-2011-1345 http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011  View
47632 8303 CVE-2011-1345 oval:org.mitre.oval:def:12228  View
47633 8303 CVE-2011-1345 http://twitter.com/aaronportnoy/statuses/45642180118855680  View
47634 8303 CVE-2011-1345 http://twitter.com/msftsecresponse/statuses/45646985998516224  View
47635 8303 CVE-2011-1345 http://www.computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own  View
47636 8303 CVE-2011-1345 MS11-018  View
47637 8303 CVE-2011-1345 46821  View
47638 8303 CVE-2011-1345 1025327  View
47639 8303 CVE-2011-1345 TA11-102A  View
47640 8303 CVE-2011-1345 http://www.zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367  View
47641 8303 CVE-2011-1345 ms-ie-unspec-code-exec(66062)  View
47642 8303 CVE-2011-1345 https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31229 JVNDB-2011-001469 Microsoft Internet Explorer における任意のコードを実行される脆弱性 Microsoft Internet Explorer には、メモリ内のオブジェクトを適切に処理しないため、任意のコードを実行される脆弱性が存在します。 CVE-2011-1345 49252 CVE-2011-1345 8303 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001469.html 2011-03-10 2011-05-02 View