Summary
This host is missing a critical security update according to Microsoft Bulletin MS11-052.
Impact
Successful exploitation could allow remote attackers to execute arbitrary code in the context of the application.
Impact Level: System/Application
Solution
Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://www.microsoft.com/technet/security/bulletin/MS11-052.mspx
Insight
The flaw is caused when Internet Explorer attempts to access an object that has not been initialised or has been deleted causing memory corruption.
Affected
Microsoft Internet Explorer version 6.x/7.x/8.x
References
Severity
Classification
-
CVE CVE-2011-1266 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Microsoft Data Access Components Remote Code Execution Vulnerabilities (2560656)
- Microsoft IIS FTP Service Remote Code Execution Vulnerabilities (975254)
- Cumulative Security Update for Internet Explorer (933566)
- Microsoft IIS Security Bypass Vulnerability (970483)
- Microsoft Internet Explorer HTML Rendering Remote Memory Corruption Vulnerability (944533)