Summary
This host is missing a critical security update according to Microsoft Bulletin MS11-052.
Impact
Successful exploitation could allow remote attackers to execute arbitrary code in the context of the application.
Impact Level: System/Application
Solution
Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://www.microsoft.com/technet/security/bulletin/MS11-052.mspx
Insight
The flaw is caused when Internet Explorer attempts to access an object that has not been initialised or has been deleted causing memory corruption.
Affected
Microsoft Internet Explorer version 6.x/7.x/8.x
References
Severity
Classification
-
CVE CVE-2011-1266 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Microsoft Internet Explorer Multiple Code Execution Vulnerabilities (974455)
- Microsoft Internet Explorer Memory Corruption Vulnerability (2755801)
- Microsoft DirectAccess Security Advisory (2862152)
- Microsoft .NET Framework Authentication Bypass and Spoofing Vulnerabilities (2836440)
- Microsoft Group Policy Remote Code Execution Vulnerability (3000483)