Summary
This host is missing a critical security update according to Microsoft Bulletin MS11-052.
Impact
Successful exploitation could allow remote attackers to execute arbitrary code in the context of the application.
Impact Level: System/Application
Solution
Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://www.microsoft.com/technet/security/bulletin/MS11-052.mspx
Insight
The flaw is caused when Internet Explorer attempts to access an object that has not been initialised or has been deleted causing memory corruption.
Affected
Microsoft Internet Explorer version 6.x/7.x/8.x
References
Severity
Classification
-
CVE CVE-2011-1266 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Embedded OpenType Font Engine Remote Code Execution Vulnerability (982132)
- Microsoft Antimalware Client Privilege Elevation Vulnerability (2823482)
- Microsoft Excel Could Allow Remote Code Execution Vulnerabilities (954066)
- Microsoft Help and Support Center Remote Code Execution Vulnerability (2229593)
- Cumulative Security Update for Internet Explorer (950759)