CVE-2011-1961Microsoft Internet Explorer vulnerability

18 documents5 sources
Severity
9.3CRITICALNVD
EPSS
32.2%
top 3.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 10
Latest updateMay 13

Description

The telnet URI handler in Microsoft Internet Explorer 6 through 9 does not properly launch the handler application, which allows remote attackers to execute arbitrary programs via a crafted web site, aka "Telnet Handler Remote Code Execution Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

NVDmicrosoft/internet_explorer4 versions+3

Patches

🔴Vulnerability Details

1
GHSA
GHSA-qwrv-2qv7-f9m4: The telnet URI handler in Microsoft Internet Explorer 6 through 9 does not properly launch the handler application, which allows remote attackers to e2022-05-13

💥Exploits & PoCs

1
Exploit-DB
HP OpenView Network Node Manager (OV NNM) - 'ovwebsnmpsrv.exe ovutil' Remote Buffer Overflow (Metasploit)2011-03-23

📋Vendor Advisories

14
Red Hat
flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)2011-08-09
Red Hat
flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)2011-08-09
Red Hat
flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)2011-08-09
Red Hat
flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)2011-08-09
Red Hat
flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)2011-08-09

🕵️Threat Intelligence

1
Zscaler
Zscaler detects IE Vulnerabilities | 08-09-2011
CVE-2011-1961 — Microsoft vulnerability | cvebase