Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
11/04/12/ms11-034-addressing-vulnerabilities-in-the-win32k-subsystem.aspx - http://www.securitytracker.com/id?1025345 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12417
CVE ID: CVE-2011-1239 State: PUBLISHED Published: 2011-04-13T20:07:00 Last Updated: 2024-08-06T22:21:33.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: Refer
listed in MS11-034, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/66421 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-034 - http://www.vupen.com/english/advisories/2011/0952 - http://support.avaya.com/css/P8/documents/100133352 - http://www.securityfocus.com/bid/47216 - http://osvdb.org/71754 - http://secunia.com/advisories/44156 - http://blogs.technet.com/b/srd/archive/2011/04/12/ms11-034-addressing-vulnerabilities-in-the-win32k-subsystem.aspx - https://oval.cisecurity.org/repository/searc
11/04/12/ms11-034-addressing-vulnerabilities-in-the-win32k-subsystem.aspx - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11726 - http://www.securitytracker.com/id?1025345
CVE ID: CVE-2011-1240 State: PUBLISHED Published: 2011-04-13T20:07:00 Last Updated: 2024-08-06T22:21:33.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: Refer
listed in MS11-034, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-034 - http://www.vupen.com/english/advisories/2011/0952 - http://www.securityfocus.com/bid/47217 - http://support.avaya.com/css/P8/documents/100133352 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12547 - http://osvdb.org/71755 - http://secunia.com/advisories/44156 - http://blogs.technet.com/b/srd/archive/2011/04/12/ms11-034-addressing-vulnerabilities-in-the-win32k-subsystem.aspx - https://ex
blogs.technet.com/b/srd/archive/2011/04/12/ms11-034-addressing-vulnerabilities-in-the-win32k-subsystem.aspx - https://exchange.xforce.ibmcloud.com/vulnerabilities/66422 - http://www.securitytracker.com/id?1025345
CVE ID: CVE-2011-1241 State: PUBLISHED Published: 2011-04-13T20:07:00 Last Updated: 2024-08-06T22:21:33.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: Refer
listed in MS11-034, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12540 - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-034 - http://www.securityfocus.com/bid/47218 - http://osvdb.org/71756 - http://www.vupen.com/english/advisories/2011/0952 - http://support.avaya.com/css/P8/documents/100133352 - http://secunia.com/advisories/44156 - http://blogs.technet.com/b/srd/archive/2011/04/12/ms11-034-addressing-vulnerabilities-in-the-win32k-subsystem.aspx - http://www
blogs.technet.com/b/srd/archive/2011/04/12/ms11-034-addressing-vulnerabilities-in-the-win32k-subsystem.aspx - http://www.securitytracker.com/id?1025345
CVE ID: CVE-2011-1242 State: PUBLISHED Published: 2011-04-13T20:07:00 Last Updated: 2024-08-06T22:21:33.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: Refer
listed in MS11-034, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12525 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-034 - http://www.vupen.com/english/advisories/2011/0952 - http://www.securityfocus.com/bid/47219 - http://support.avaya.com/css/P8/documents/100133352 - http://osvdb.org/71757 - http://secunia.com/advisories/44156 - http://blogs.technet.com/b/srd/archive/2011/04/12/ms11-034-addressing-vulnerabilities-in-the-win32k-subsystem.aspx - http://www
CVE ID: CVE-2011-1243 State: PUBLISHED Published: 2011-04-13T18:00:00 Last Updated: 2024-08-06T22:21:33.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via unspecified vectors that "corrupt the system state," aka "Microsoft Windows Messenger ActiveX Control Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12524 - http://www.securityfocus.com/bid/47197 - http://osvdb.org/71788 - https://docs.microsoft.com/en-us/security-updat
2524 - http://www.securityfocus.com/bid/47197 - http://osvdb.org/71788 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027 - http://secunia.com/advisories/44159
CVE ID: CVE-2011-1244 State: PUBLISHED Published: 2011-04-13T18:00:00 Last Updated: 2024-08-06T22:21:33.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6, 7, and 8 does not enforce intended domain restrictions on content access, which allows remote attackers to obtain sensitive information or conduct clickjacking attacks via a crafted web site, aka "Frame Tag Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/71777 - http://www.securityfocus.com/bid/47191 - http://www.securitytracker.com/id?1025327 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-01
://www.securitytracker.com/id?1025327 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-018 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11926
CVE ID: CVE-2011-1245 State: PUBLISHED Published: 2011-04-13T18:00:00 Last Updated: 2024-08-06T22:21:33.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 and 7 does not properly restrict script access to content from a (1) different domain or (2) different zone, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Javascript Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://www.securitytracker.com/id?1025327 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-018 - http
ecuritytracker.com/id?1025327 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-018 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12385 - http://www.securityfocus.com/bid/47192
CVE ID: CVE-2011-1246 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:33.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 does not properly handle content settings in HTTP responses, which allows remote web servers to obtain sensitive information from a different (1) domain or (2) zone via a crafted response, aka "MIME Sniffing Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12464 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050
CVE ID: CVE-2011-1247 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2024-08-06T22:21:33.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the Microsoft Active Accessibility component in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Active Accessibility Insecure Library Loading Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011
t Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-075 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13116
CVE ID: CVE-2011-1248 State: PUBLISHED Published: 2011-05-13T17:00:00 Last Updated: 2024-08-06T22:21:33.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted packets, related to unintended stack-frame values and buffer passing, aka "WINS Service Failed Response Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12724 - ht
ntainer: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12724 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-035
CVE ID: CVE-2011-1249 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:33.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011
t Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-046 - https://www.exploit-db.com/exploits/40564/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12731
CVE ID: CVE-2011-1250 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:33.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Link Properties Handling Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/518445/100/0/threaded - http://www.nsfocus.com/en/advisories/1101.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mit
http://www.nsfocus.com/en/advisories/1101.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12708 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050
CVE ID: CVE-2011-1251 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:33.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "DOM Manipulation Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12326 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050
CVE ID: CVE-2011-1252 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2025-01-21T18:00:51.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified strings, aka "toStaticHTML Information Disclosure Vulnerability" or "HTML Sanitization Vulnerability." Additional Analyst Notes: -
ka "toStaticHTML Information Disclosure Vulnerability" or "HTML Sanitization Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-074 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12885 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12577 - http://www.us-cert.gov/cas/techalerts/TA11-256A.html
CVE ID: CVE-2011-1253 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2024-08-06T22:21:33.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.0.60831, does not properly restrict inheritance, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Class Inheritance Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security
lnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-078 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13069
CVE ID: CVE-2011-1254 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:33.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Drag and Drop Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12368
CVE ID: CVE-2011-1255 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:33.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Time Element Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/72947 - http://blogs.technet.com/b/srd/archive/2011/06/14/ms11-050-ie9-is-better.aspx - https://docs
- http://osvdb.org/72947 - http://blogs.technet.com/b/srd/archive/2011/06/14/ms11-050-ie9-is-better.aspx - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12227
CVE ID: CVE-2011-1256 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:33.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "DOM Modification Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12716
CVE ID: CVE-2011-1257 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:21:34.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors involving access to an object, aka "Window Open Race Condition Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12787 - http://www.us-cert.gov/cas/techalerts/TA
security.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12787 - http://www.us-cert.gov/cas/techalerts/TA11-221A.html
CVE ID: CVE-2011-1258 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:33.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 8 does not properly restrict web script, which allows user-assisted remote attackers to obtain sensitive information from a different (1) domain or (2) zone via vectors involving a drag-and-drop operation, aka "Drag and Drop Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12495 - http://blogs.technet.com/b/msrc/archive/2011/06/09/june-advance-notifi
/definition/oval%3Aorg.mitre.oval%3Adef%3A12495 - http://blogs.technet.com/b/msrc/archive/2011/06/09/june-advance-notification-service-and-10-immutable-laws-revisited.aspx - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050
CVE ID: CVE-2011-1259 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-1260 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:33.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12308 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050 - http://securityreason.com/
3A12308 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050 - http://securityreason.com/securityalert/8275
CVE ID: CVE-2011-1261 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:33.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Selection Object Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12755
CVE ID: CVE-2011-1262 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:33.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "HTTP Redirect Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12405 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050
CVE ID: CVE-2011-1263 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:21:34.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the logon page in Remote Desktop Web Access (RD Web Access) in Microsoft Windows Server 2008 R2 and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "Remote Desktop Web Access Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-061 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12792 - http://www.us-
ms11-061 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12792 - http://www.us-cert.gov/cas/techalerts/TA11-221A.html