CVE-2011-1346

CRITICAL 9.3CVE-2011-1346 · Published 10/03/2011 · updated 16/06/2026

Package	Affected versions	Patched versions
internet explorer microsoft	`= 8`	No fix yet

Description

Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Stephen Fewer as the second of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011.

References

dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011
twitter.com/aaronportnoy/statuses/45642180118855680
twitter.com/msftsecresponse/statuses/45646985998516224
computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own
securityfocus.com/bid/46821
zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367
exchange.xforce.ibmcloud.com/vulnerabilities/66063
threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free