Unscored severity · published Feb 25, 2011
CVE-2011-0037
Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FC
Forefront Client Security · Microsoft
All versions, or not specified · source: NVD
FE
Forefront Endpoint Protection 2010 · Microsoft
All versions, or not specified · source: NVD
MS
Malicious Software Removal Tool · Microsoft
All versions, or not specified · source: NVD
MP
Malware Protection Engine · Microsoft
through 1.1.6502.0; 0.1.13.192; 1.1.3520.0 · source: NVD
SE
Security Essentials · Microsoft
All versions, or not specified · source: NVD
WD
Windows Defender · Microsoft
All versions, or not specified · source: NVD
WL
Windows Live Onecare · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0037
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0037
Vendor Advisory
http://secunia.com/advisories/43468
securitytracker.com
http://securitytracker.com/id?1025117
Vendor Advisory
http://www.microsoft.com/technet/security/advisory/2491888.mspx
www.securityfocus.com
http://www.securityfocus.com/bid/46540
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0486
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/65626
More from Forefront Client Security
8.1
CVE-2009-2502
Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002…
–
CVE-2009-3126
Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project…
–
CVE-2009-2528
GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted…
–
CVE-2009-2504
Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista…
–
CVE-2009-2503
GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office…