CVE-2011-0037
Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.78%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key.
- CVSS 2.0
- 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 1.78% probability · 77th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- microsoft/forefront client security · microsoft/forefront endpoint protection 2010 · microsoft/malicious software removal tool · microsoft/malware protection engine · microsoft/security essentials · microsoft/windows defender · microsoft/windows live onecare
- Source
- secure@microsoft.com
References
- http://secunia.com/advisories/43468Vendor Advisory
- http://securitytracker.com/id?1025117
- http://www.microsoft.com/technet/security/advisory/2491888.mspxVendor Advisory
- http://www.securityfocus.com/bid/46540
- http://www.vupen.com/english/advisories/2011/0486Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65626
- http://secunia.com/advisories/43468Vendor Advisory
- http://securitytracker.com/id?1025117
- http://www.microsoft.com/technet/security/advisory/2491888.mspxVendor Advisory
- http://www.securityfocus.com/bid/46540
- http://www.vupen.com/english/advisories/2011/0486Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65626
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.