CVE-2011-0038 Untrusted search path vulnerability in Microsoft Internet Explorer 8 might allow local users to gain privileges via a Trojan horse IEShims.dll in the current working directory, as demonstrated by a De...
HighCVSS 9.3
EPSS 11.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in Microsoft Internet Explorer 8 might allow local users to gain privileges via a Trojan horse IEShims.dll in the current working directory, as demonstrated by a Desktop directory that contains an HTML file, aka "Internet Explorer Insecure Library Loading Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 8 | No fix listed |
References
- 70833 vdb-entry
- support.avaya.com
- www.fortiguard.com
- 46159 vdb-entry
- 1025038 vdb-entry
- ADV-2011-0318 vdb-entry vendor-advisory
- MS11-003 vendor-advisory
- ms-ie-dll-code-execution(64913) vdb-entry
- oval:org.mitre.oval:def:12270 signature vdb-entry