CVE-2011-1345

N/A Unknown
Published: March 10, 2011 Modified: April 29, 2026
View on NVD

Description

Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, as demonstrated by Stephen Fewer as the first of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011, aka "Object Management Memory Corruption Vulnerability."

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011
Source: cve@mitre.org
http://twitter.com/aaronportnoy/statuses/45642180118855680
Source: cve@mitre.org
http://twitter.com/msftsecresponse/statuses/45646985998516224
Source: cve@mitre.org
http://www.computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own
Source: cve@mitre.org
http://www.securityfocus.com/bid/46821
Source: cve@mitre.org
http://www.securitytracker.com/id?1025327
Source: cve@mitre.org
http://www.us-cert.gov/cas/techalerts/TA11-102A.html
Source: cve@mitre.org
US Government Resource
http://www.zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367
Source: cve@mitre.org
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-018
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/66062
Source: cve@mitre.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12228
Source: cve@mitre.org
https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011
Source: cve@mitre.org
http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011
Source: af854a3a-2127-422b-91ae-364da2661108
http://twitter.com/aaronportnoy/statuses/45642180118855680
Source: af854a3a-2127-422b-91ae-364da2661108
http://twitter.com/msftsecresponse/statuses/45646985998516224
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/46821
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1025327
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.us-cert.gov/cas/techalerts/TA11-102A.html
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
http://www.zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367
Source: af854a3a-2127-422b-91ae-364da2661108
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-018
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/66062
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12228
Source: af854a3a-2127-422b-91ae-364da2661108
https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011
Source: af854a3a-2127-422b-91ae-364da2661108

24 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
40.9%
98th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

microsoft