CVE-2011-1260 Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or....
HighCVSS 9.3
EPSS 67.3%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 8 | No fix listed |
| Microsoft internet explorer | = 9 | No fix listed |
References
- 8275 third-party-advisory
- MS11-050 vendor-advisory
- oval:org.mitre.oval:def:12308 signature vdb-entry