CVE-2011-1243

The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via unspecified vectors that "corrupt the system state," aka "Microsoft Windows Messenger ActiveX Control Vulnerability."

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://osvdb.org/71788
http://secunia.com/advisories/44159
http://www.securityfocus.com/bid/47197
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12524

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_xp::sp3::::::*
	cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:::::*

History

No history.

Information

Published : 2011-04-13 18:55

Updated : 2023-12-10 11:03

NVD link : CVE-2011-1243

Mitre link : CVE-2011-1243

CVE.ORG link : CVE-2011-1243

JSON object : View

Products Affected

microsoft

windows_xp

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2011-1243", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2011-04-13T18:55:01.687", "references": [{"url": "http://osvdb.org/71788", "source": "secure@microsoft.com"}, {"url": "http://secunia.com/advisories/44159", "source": "secure@microsoft.com"}, {"url": "http://www.securityfocus.com/bid/47197", "source": "secure@microsoft.com"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027", "source": "secure@microsoft.com"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12524", "source": "secure@microsoft.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via unspecified vectors that \"corrupt the system state,\" aka \"Microsoft Windows Messenger ActiveX Control Vulnerability.\""}, {"lang": "es", "value": "El control ActiveX Windows Messenger de msgsc.dll de Microsoft Windows XP SP2 y SP3 permite a atacantes remotos ejcutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de vectores sin especificar que \"corrompen el estado del sistema\". Tambi\u00e9n conocido como \"Vulnerabilidad del control ActiveX Windows Messenger\"."}], "lastModified": "2018-10-12T22:00:34.937", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE477A73-4EE4-41E9-8694-5A3D5DC88656"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}