ByteOS Network

NVD Vulnerability Details :

CVE-2011-2009

Deferred

Source-secure@microsoft.com

Published At-12 Oct, 2011 | 02:52

Updated At-11 Apr, 2025 | 00:51

Untrusted search path vulnerability in Windows Media Center in Microsoft Windows Vista SP2 and Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista, allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Media Center Insecure Library Loading Vulnerability."

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

Evaluator Description

Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426: Untrusted Search Path'

Evaluator Impact

Per: http://technet.microsoft.com/en-us/security/bulletin/MS11-076 Access Vector: Network per "This is a remote code execution vulnerability"

References

Hyperlink	Source	Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-076	secure@microsoft.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12934	secure@microsoft.com	N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-076	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12934	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog