CVE-2011-0036

CRITICAL 9.3CVE-2011-0036 · Published 10/02/2011 · updated 16/06/2026

Package	Affected versions	Patched versions
internet explorer microsoft	`= 6= 7= 8`	No fix yet

Description

Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, related to a "dangling pointer," aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2010-2556 and CVE-2011-0035.

References

osvdb.org/70832
support.avaya.com/css/P8/documents/100127294
securityfocus.com/bid/46158
securitytracker.com/id
vupen.com/english/advisories/2011/0318 · Vendor Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-003
exchange.xforce.ibmcloud.com/vulnerabilities/64912
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12261

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free