CVE-2011-1969 Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute....
HighCVSS 9.3
EPSS 17.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on client machines via unspecified vectors, aka "Poisoned Cup of Code Execution Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft forefront unified access gateway | = 2010 | No fix listed |
| Microsoft forefront unified access gateway | = 2010-sp1 | No fix listed |
| Microsoft forefront unified access gateway | = 2010-update1 | No fix listed |
| Microsoft forefront unified access gateway | = 2010-update2 | No fix listed |
References
- 49983 vdb-entry
- MS11-079 vendor-advisory
- oval:org.mitre.oval:def:13032 signature vdb-entry