ByteOS Network

NVD Vulnerability Details :

CVE-2011-1345

Deferred

Source-cve@mitre.org

Published At-10 Mar, 2011 | 20:55

Updated At-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, as demonstrated by Stephen Fewer as the first of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011, aka "Object Management Memory Corruption Vulnerability."

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Microsoft Corporation

>>internet_explorer>>8

cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_7>>*

cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011	cve@mitre.org	N/A
http://twitter.com/aaronportnoy/statuses/45642180118855680	cve@mitre.org	N/A
http://twitter.com/msftsecresponse/statuses/45646985998516224	cve@mitre.org	N/A
http://www.computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own	cve@mitre.org	N/A
http://www.securityfocus.com/bid/46821	cve@mitre.org	N/A
http://www.securitytracker.com/id?1025327	cve@mitre.org	N/A
http://www.us-cert.gov/cas/techalerts/TA11-102A.html	cve@mitre.org	US Government Resource
http://www.zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367	cve@mitre.org	N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-018	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/66062	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12228	cve@mitre.org	N/A
https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011	cve@mitre.org	N/A
http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011	af854a3a-2127-422b-91ae-364da2661108	N/A
http://twitter.com/aaronportnoy/statuses/45642180118855680	af854a3a-2127-422b-91ae-364da2661108	N/A
http://twitter.com/msftsecresponse/statuses/45646985998516224	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/46821	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1025327	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.us-cert.gov/cas/techalerts/TA11-102A.html	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367	af854a3a-2127-422b-91ae-364da2661108	N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-018	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/66062	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12228	af854a3a-2127-422b-91ae-364da2661108	N/A
https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History