CVEvulnerability
CVE-2011-0347
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-01-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Microsoft Internet Explorer on Windows XP allows remote attackers to trigger an incorrect GUI display and have unspecified other impact via vectors related to the DOM implementation, as demonstrated by cross_fuzz.
Affected configurations
• microsoft internet explorer
References
- http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0698.html archives.neohapsis.com
- http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx blogs.technet.com
- http://lcamtuf.blogspot.com/2011/01/announcing-crossfuzz-potential-0-day-in.html lcamtuf.blogspot.com
- http://lcamtuf.coredump.cx/cross_fuzz/fuzzer_timeline.txt lcamtuf.coredump.cx
- http://lcamtuf.coredump.cx/cross_fuzz/msie_display.jpg lcamtuf.coredump.cx
- http://www.microsoft.com/technet/security/advisory/2490606.mspx Vendor Advisory
- http://www.securityfocus.com/archive/1/515506/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64571 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12514 oval.cisecurity.org
- http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0698.html archives.neohapsis.com
- http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx blogs.technet.com
- http://lcamtuf.blogspot.com/2011/01/announcing-crossfuzz-potential-0-day-in.html lcamtuf.blogspot.com
- http://lcamtuf.coredump.cx/cross_fuzz/fuzzer_timeline.txt lcamtuf.coredump.cx
- http://lcamtuf.coredump.cx/cross_fuzz/msie_display.jpg lcamtuf.coredump.cx
- http://www.microsoft.com/technet/security/advisory/2490606.mspx Vendor Advisory
- http://www.securityfocus.com/archive/1/515506/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64571 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12514 oval.cisecurity.org