CVE-2011-2019

Untrusted search path vulnerability in Microsoft Internet Explorer 9 on Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an HTML file, aka "Internet Explorer Insecure Library Loading Vulnerability."
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:-:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*

History

01 Mar 2022, 14:50

Type Values Removed Values Added
CPE cpe:2.3:o:microsoft:windows_server_2008:r2:*:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:-:*:*:*:*:*:*
References (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13884 - (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13884 - Tool Signature
References (MS) https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-099 - (MS) https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-099 - Patch, Vendor Advisory
References (CERT) http://www.us-cert.gov/cas/techalerts/TA11-347A.html - US Government Resource (CERT) http://www.us-cert.gov/cas/techalerts/TA11-347A.html - Third Party Advisory, US Government Resource
CWE NVD-CWE-Other CWE-426

23 Jul 2021, 15:12

Type Values Removed Values Added
CPE cpe:2.3:a:microsoft:ie:9:*:*:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*

Information

Published : 2011-12-14 00:55

Updated : 2023-12-10 11:03


NVD link : CVE-2011-2019

Mitre link : CVE-2011-2019

CVE.ORG link : CVE-2011-2019


JSON object : View

Products Affected

microsoft

  • internet_explorer
  • windows_server_2008
  • windows_7
CWE
CWE-426

Untrusted Search Path