Unscored severity · published Dec 14, 2011
CVE-2011-2010
The Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style…
–
CVSS
1.7%
EPSS
No
On KEV
Description
The Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the Microsoft Pinyin (aka MSPY) IME toolbar, aka "Pinyin IME Elevation Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PI
Pinyin Ime · Microsoft
2010; 2010 · source: NVD
PN
Pinyin New Experience Style · Microsoft
2010; 2010 · source: NVD
PS
Pinyin Simple Fast Style · Microsoft
2010; 2010 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2010
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2010
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA11-347A.html
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-088
More from Pinyin Ime
–
CVE-2015-2503
Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office…
–
CVE-2013-3859
Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges…