CVE-2011-1347 - Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to b

CVE-2011-1347

Summary

Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to bypass Protected Mode and create arbitrary files by leveraging access to a Low integrity process, as demonstrated by Stephen Fewer as the third of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011.

References

Vulnerable Configurations

cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*

CVSS

Base:	8.8 (as of 23-07-2021 - 15:12)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:C/A:C

refmap via4

bid	46821
misc	http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011 http://twitter.com/aaronportnoy/statuses/45642180118855680 http://twitter.com/msftsecresponse/statuses/45646985998516224 http://www.computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own http://www.zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367 https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011
xf	ms-ie-unspec-ce(66064)

Last major update

23-07-2021 - 15:12

Published

10-03-2011 - 20:55

Last modified

23-07-2021 - 15:12