CVE-2011-0037 Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint...
HighCVSS 7.2
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft forefront client security | All versions | No fix listed |
| Microsoft forefront endpoint protection 2010 | All versions | No fix listed |
| Microsoft malicious software removal tool | All versions | No fix listed |
| Microsoft malware protection engine | <= 1.1.6502.0 | No fix listed |
| Microsoft malware protection engine | = 0.1.13.192 | No fix listed |
| Microsoft malware protection engine | = 1.1.3520.0 | No fix listed |
| Microsoft security essentials | All versions | No fix listed |
| Microsoft Windows Defender | All versions | No fix listed |
| Microsoft windows live onecare | All versions | No fix listed |
References
- 43468 third-party-advisory vendor-advisory
- 1025117 vdb-entry
- www.microsoft.com vendor-advisory
- 46540 vdb-entry
- ADV-2011-0486 vdb-entry vendor-advisory
- ms-malware-engine-priv-esc(65626) vdb-entry