deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-1709
Published: 2011-06-14
Description: GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.2.news; http://git.gnome.org/browse/gdm/commit/?id=d13dd72531599ab7e4c747db3b58a8c17753e08d; http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061264.html
CVE: CVE-2011-1857
Published: 2011-06-14
Description: Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote authenticated users to bypass intended access restrictions via unknown vectors.
CVSS Score: 8.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1099&w=2; http://secunia.com/advisories/44836; http://securityreason.com/securityalert/8273
CVE: CVE-2011-1858
Published: 2011-06-14
Description: Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows local users to bypass intended access restrictions via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1099&w=2; http://secunia.com/advisories/44836; http://securityreason.com/securityalert/8273
CVE: CVE-2011-1859
Published: 2011-06-14
Description: Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to obtain sensitive information via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1099&w=2; http://secunia.com/advisories/44836; http://securityreason.com/securityalert/8273
CVE: CVE-2011-1860
Published: 2011-06-14
Description: Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to capture HTTP session credentials via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1099&w=2; http://secunia.com/advisories/44836; http://securityreason.com/securityalert/8273
CVE: CVE-2011-1861
Published: 2011-06-14
Description: Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to modify data or obtain sensitive information via unknown vectors.
CVSS Score: 8.3 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1099&w=2; http://secunia.com/advisories/44836; http://securityreason.com/securityalert/8273
CVE: CVE-2011-1862
Published: 2011-06-14
Description: Cross-site scripting (XSS) vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1099&w=2; http://secunia.com/advisories/44836; http://securityreason.com/securityalert/8273
CVE: CVE-2011-1863
Published: 2011-06-14
Description: HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allow remote authenticated users to conduct unspecified script injection attacks via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1099&w=2; http://secunia.com/advisories/44836; http://securityreason.com/securityalert/8273
CVE: CVE-2011-1864
Published: 2011-06-14
Description: Unspecified vulnerability in HP OpenView Storage Data Protector 6.0, 6.10, and 6.11 allows remote attackers to execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/72864; http://secunia.com/advisories/44884; http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02712867
CVE: CVE-2011-1924
Published: 2011-06-14
Description: Buffer overflow in the policy_summarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service (directory authority crash) via a crafted policy that triggers creation of a long port list.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061258.html; http://secunia.com/advisories/43548; http://secunia.com/advisories/44862
CVE: CVE-2011-1943
Published: 2011-06-14
Description: The destroy_one_secret function in nm-setting-vpn.c in libnm-util in the NetworkManager package 0.8.999-3.git20110526 in Fedora 15 creates a log entry containing a certificate password, which allows local users to obtain sensitive information by reading a log file.
CVSS Score: 2.1 (LOW)
CWE: CWE-532
References: http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=78ce088843d59d4494965bfc40b30a2e63d065f6; http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061329.html; http://www.openwall.com/lists/oss-security/2011/05/31/6
CVE: CVE-2011-2179
Published: 2011-06-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an (a) command action or a (b) hosts action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2011-06/0017.html; http://archives.neohapsis.com/archives/bugtraq/2011-06/0018.html; http://secunia.com/advisories/44974
CVE: CVE-2011-2476
Published: 2011-06-14
Description: Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-4667.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://forum.coppermine-gallery.net/index.php/topic%2C69495.0.html; http://sourceforge.net/news/?group_id=89658; http://www.openwall.com/lists/oss-security/2011/06/08/2
CVE: CVE-2011-2477
Published: 2011-06-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in Icinga before 1.4.1, when escape_html_tags is disabled, allow remote attackers to inject arbitrary web script or HTML via a JavaScript expression, as demonstrated by the onload attribute of a BODY element located after a check-host-alive! sequence, a different vulnerability than CVE-2011-2179.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: https://dev.icinga.org/issues/1605; https://exchange.xforce.ibmcloud.com/vulnerabilities/68056; https://dev.icinga.org/issues/1605
CVE: CVE-2011-0786
Published: 2011-06-14
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2011-0788.
CVSS Score: 7.6 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.html
CVE: CVE-2011-0788
Published: 2011-06-14
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2011-0786.
CVSS Score: 7.6 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.html
CVE: CVE-2011-0802
Published: 2011-06-14
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound, a different vulnerability than CVE-2011-0814.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.html
CVE: CVE-2011-0814
Published: 2011-06-14
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound, a different vulnerability than CVE-2011-0802.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.html
CVE: CVE-2011-0815
Published: 2011-06-14
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to AWT.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.html
CVE: CVE-2011-0817
Published: 2011-06-14
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.html
CVE: CVE-2011-0862
Published: 2011-06-14
Description: Multiple unspecified vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.html
CVE: CVE-2011-0863
Published: 2011-06-14
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.html
CVE: CVE-2011-0864
Published: 2011-06-14
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1822&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6190&w=2
CVE: CVE-2011-0865
Published: 2011-06-14
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors related to Deserialization.
CVSS Score: 2.6 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.html
CVE: CVE-2011-0866
Published: 2011-06-14
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Java Runtime Environment.
CVSS Score: 7.6 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.html
CVE: CVE-2011-0867
Published: 2011-06-14
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to Networking.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.html
CVE: CVE-2011-0868
Published: 2011-06-14
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.html
CVE: CVE-2011-0869
Published: 2011-06-14
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 26 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to SAAJ.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.html
CVE: CVE-2011-0871
Published: 2011-06-14
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Swing.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.html
CVE: CVE-2011-0872
Published: 2011-06-14
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect availability via unknown vectors related to NIO.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.html
CVE: CVE-2011-0873
Published: 2011-06-14
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, and 5.0 Update 29 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.html
CVE: CVE-2011-0658
Published: 2011-06-16
Description: Integer underflow in the OLE Automation protocol implementation in VBScript.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted WMF file, aka "OLE Automation Underflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-038; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12335; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-038
CVE: CVE-2011-0664
Published: 2011-06-16
Description: Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Array Offset Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-039; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12105; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-039
CVE: CVE-2011-1246
Published: 2011-06-16
Description: Microsoft Internet Explorer 8 does not properly handle content settings in HTTP responses, which allows remote web servers to obtain sensitive information from a different (1) domain or (2) zone via a crafted response, aka "MIME Sniffing Information Disclosure Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12464; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050
CVE: CVE-2011-1249
Published: 2011-06-16
Description: The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-046; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12731; https://www.exploit-db.com/exploits/40564/
CVE: CVE-2011-1250
Published: 2011-06-16
Description: Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Link Properties Handling Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-908
References: http://www.nsfocus.com/en/advisories/1101.html; http://www.securityfocus.com/archive/1/518445/100/0/threaded; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050
CVE: CVE-2011-1251
Published: 2011-06-16
Description: Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "DOM Manipulation Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-908
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12326; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050
CVE: CVE-2011-1252
Published: 2011-06-16
Description: Cross-site scripting (XSS) vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified strings, aka "toStaticHTML Information Disclosure Vulnerability" or "HTML Sanitization Vulnerability."
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.us-cert.gov/cas/techalerts/TA11-256A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-074
CVE: CVE-2011-1254
Published: 2011-06-16
Description: Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Drag and Drop Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-908
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12368; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050
CVE: CVE-2011-1255
Published: 2011-06-16
Description: The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Time Element Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-908
References: http://blogs.technet.com/b/srd/archive/2011/06/14/ms11-050-ie9-is-better.aspx; http://osvdb.org/72947; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050
CVE: CVE-2011-1256
Published: 2011-06-16
Description: Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "DOM Modification Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-908
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12716; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050