CVE-2011-2000: Critical severity internet explorer vulnerability
Published Oct 12, 2011
·Updated
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Body Element Remote Code Execution Vulnerability."
Affected Software
16 affected components
Microsoft Internet Explorer=6
Microsoft Windows Server 2003=sp2
Microsoft Windows XP=sp2
Microsoft Windows XP=sp3
Microsoft Internet Explorer=7
Microsoft Windows Server 2008
Microsoft Windows Server 2008=sp2
Microsoft Windows Vista=sp1
Microsoft Windows Vista=sp2
Microsoft Windows XP=sp2
Microsoft Internet Explorer=8
Microsoft Windows 7
Microsoft Windows Server 2008=r2
Microsoft Windows Server 2008=r2-sp1
Microsoft Internet Explorer=9
Microsoft Windows 7=sp1
Remediation
Event History
Oct 12, 2011
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Data Sourced
02:52 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2011-2000?
CVE-2011-2000 has a critical severity rating as it allows remote code execution.
2
How do I fix CVE-2011-2000?
To fix CVE-2011-2000, users must install the Microsoft security update that addresses the vulnerability.
3
What versions of Internet Explorer are affected by CVE-2011-2000?
CVE-2011-2000 affects Microsoft Internet Explorer versions 6, 7, 8, and 9.
4
Can CVE-2011-2000 lead to data breaches?
Yes, CVE-2011-2000 can lead to data breaches as it allows attackers to execute arbitrary code.
5
What types of attacks exploit CVE-2011-2000?
CVE-2011-2000 can be exploited through crafted web pages that trigger the vulnerability when accessed by users.