high7.2
CVE-2011-0037
Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Fore…
Impact
Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Forefront Client Security | All versions |
| Microsoft | Forefront Endpoint Protection 2010 | All versions |
| Microsoft | Malicious Software Removal Tool | All versions |
| Microsoft | Malware Protection Engine | through 1.1.6502.0 Versions 0.1.13.192, 1.1.3520.0 |
| Microsoft | Security Essentials | All versions |
| Microsoft | Windows Defender | All versions |
| Microsoft | Windows Live Onecare | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/43468
- http://securitytracker.com/id?1025117
- http://www.microsoft.com/technet/security/advisory/2491888.mspx
- http://www.securityfocus.com/bid/46540
- http://www.vupen.com/english/advisories/2011/0486
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65626
- http://secunia.com/advisories/43468
- http://securitytracker.com/id?1025117
- http://www.microsoft.com/technet/security/advisory/2491888.mspx
- http://www.securityfocus.com/bid/46540
- http://www.vupen.com/english/advisories/2011/0486
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65626