CVE-2011-0094: Use After Free
Published Apr 13, 2011
·Updated
Use-after-free vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Layouts Handling Memory Corruption Vulnerability."
Affected Software
41 affected components
All of the following
Microsoft Internet Explorer=6
Any of the following
Microsoft Windows 2003 Server=sp2
Microsoft Windows 2003 Server=sp2
Microsoft Windows Server 2003=sp2
Microsoft Windows XP=sp3
Microsoft Windows XP=sp2
All of the following
Microsoft Internet Explorer=7
Any of the following
Microsoft Windows 2003 Server=sp2
Microsoft Windows 2003 Server=sp2
Microsoft Windows Server 2003=sp2
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=sp2
Microsoft Windows Vista=sp1
Microsoft Windows Vista=sp2
Microsoft Windows Vista=sp1
Microsoft Windows Vista=sp2
Microsoft Windows XP=sp3
Microsoft Windows XP=sp2
Microsoft Internet Explorer=6
Microsoft Windows 2003 Server=sp2
Microsoft Windows 2003 Server=sp2
Microsoft Windows Server 2003=sp2
Microsoft Windows XP=sp3
Microsoft Windows XP=sp2
Microsoft Internet Explorer=7
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=sp2
Microsoft Windows Vista=sp1
Microsoft Windows Vista=sp1
Microsoft Windows Vista=sp2
Microsoft Windows Vista=sp2
Microsoft Windows Vista=sp1
Microsoft Windows Vista=sp2
Event History
Apr 13, 2011
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
06:55 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2011-0094?
CVE-2011-0094 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2011-0094?
To fix CVE-2011-0094, you should upgrade to a supported version of Internet Explorer or apply the appropriate Microsoft security updates.
3
What versions of Internet Explorer are affected by CVE-2011-0094?
CVE-2011-0094 affects Internet Explorer 6 and 7.
4
Can CVE-2011-0094 be exploited remotely?
Yes, CVE-2011-0094 can be exploited remotely by accessing a malicious website.
5
What type of vulnerability is CVE-2011-0094?
CVE-2011-0094 is a use-after-free vulnerability leading to memory corruption.