CVE-2011-1244

EPSS 15.14%
Veröffentlicht 13.04.2011 18:55:01
Zuletzt bearbeitet 16.06.2026 23:29:00
Erkennungen
Login

Microsoft Internet Explorer 6, 7, and 8 does not enforce intended domain restrictions on content access, which allows remote attackers to obtain sensitive information or conduct clickjacking attacks via a crafted web site, aka "Frame Tag Information Disclosure Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 8

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Internet Explorer Version 6

   Microsoft ≫ Windows Server 2003 Version - Update sp2
   Microsoft ≫ Windows Xp Version - Update sp2 HwPlatform x64
   Microsoft ≫ Windows Xp Version - Update sp3

Microsoft ≫ Internet Explorer Version 7

   Microsoft ≫ Windows Server 2003 Version - Update sp2
   Microsoft ≫ Windows Server 2008 Version - Update -
   Microsoft ≫ Windows Server 2008 Version - Update sp2
   Microsoft ≫ Windows Vista Version - Update sp1
   Microsoft ≫ Windows Vista Version - Update sp2
   Microsoft ≫ Windows Xp Version - Update sp2 SwEdition professional HwPlatform x64
   Microsoft ≫ Windows Xp Version - Update sp3

Microsoft ≫ Internet Explorer Version 8

   Microsoft ≫ Windows 7 Version -
   Microsoft ≫ Windows Server 2003 Version - Update sp2
   Microsoft ≫ Windows Server 2008 Version - Update -
   Microsoft ≫ Windows Server 2008 Version - Update sp2
   Microsoft ≫ Windows Server 2008 Version r2
   Microsoft ≫ Windows Vista Version - Update sp1
   Microsoft ≫ Windows Vista Version - Update sp2
   Microsoft ≫ Windows Xp Version - Update sp2 SwEdition professional HwPlatform x64
   Microsoft ≫ Windows Xp Version - Update sp3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	15.14%	0.963

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

CWE-1021 Improper Restriction of Rendered UI Layers or Frames

The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain.

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-018

Patch

Vendor Advisory

http://www.securitytracker.com/id?1025327

Third Party Advisory

Broken Link

VDB Entry

http://osvdb.org/71777

Broken Link

http://www.securityfocus.com/bid/47191

Third Party Advisory

Broken Link

VDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11926

Tool Signature

https://nvd.nist.gov/vuln/detail/CVE-2011-1244

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-1244

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-1244

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2011-1244