7.2

CVE-2011-2010

EPSS 0.52%
Published 14.12.2011 00:55:01
Last modified 11.04.2025 00:51:21
Source secure@microsoft.com
Teams watchlist Login
Open Login

The Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the Microsoft Pinyin (aka MSPY) IME toolbar, aka "Pinyin IME Elevation Vulnerability."

Affected products Warnungen 0 Metrics 2 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Pinyin Ime Version2010 Editionx64

Microsoft ≫ Pinyin Ime Version2010 Editionx86

Microsoft ≫ Pinyin New Experience Style Version2010 Editionx64

Microsoft ≫ Pinyin New Experience Style Version2010 Editionx86

Microsoft ≫ Pinyin Simple Fast Style Version2010 Editionx64

Microsoft ≫ Pinyin Simple Fast Style Version2010 Editionx86

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.52%	0.642

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

http://www.us-cert.gov/cas/techalerts/TA11-347A.html

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-088

https://nvd.nist.gov/vuln/detail/CVE-2011-2010

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-2010

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-2010

EUVD