NVD

Id
9033  
Name
CVE-2011-2217  
Description
Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka VMware Infrastructure Client) 2.0.2 before Build 230598 and 2.5 before Build 204931 in VMware Infrastructure 3, do not properly handle attempted initialization within Internet Explorer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HTML document.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-06-06  
Modified Date
2011-09-06  
Seq
2011-2217  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
51895 9033 CVE-2011-2217 20110603 Tom Sawyer GET Extension Factory COM Object Instantiation Memory Corruption Vulnerability  View
51896 9033 CVE-2011-2217 1025602  View
51897 9033 CVE-2011-2217 48099  View
51898 9033 CVE-2011-2217 http://www.vmware.com/security/advisories/VMSA-2011-0009.html  View
51899 9033 CVE-2011-2217 vmware-viclient-code-exec(67816)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34436 JVNDB-2011-004678 VI Client で使用される Tom Sawyer GET Extension Factory の特定の ActiveX コントロールにおける任意のコードを実行される脆弱性 VMware Infrastructure の VI Client で使用される Tom Sawyer GET Extension Factory の (1) tsgetxu71ex552.dll および (2) tsgetx71ex552.dll 内の特定の ActiveX コントロールは、Internet Explorer 内で初期化を適切に処理しないため、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態となる脆弱性が存在します。 CVE-2011-2217 50124 CVE-2011-2217 9033 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004678.html 2011-06-02 2012-03-27 View