CVE-2011-3397 The Microsoft Time component in DATIME.DLL in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted web site that leverages an unspecifie...
HighCVSS 9.3
EPSS 19.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Microsoft Time component in DATIME.DLL in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted web site that leverages an unspecified "binary behavior" in Internet Explorer, aka "Microsoft Time Remote Code Execution Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows server 2003 | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- TA11-347A third-party-advisory us-government-resource
- MS11-090 vendor-advisory
- oval:org.mitre.oval:def:14735 signature vdb-entry