CVE-2011-2010: High severity microsoft pinyin vulnerability
The Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the Microsoft Pinyin (aka MSPY) IME toolbar, aka "Pinyin IME Elevation Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2010?
CVE-2011-2010 has a severity rating of Important according to Microsoft.
How do I fix CVE-2011-2010?
To fix CVE-2011-2010, apply the security updates provided by Microsoft for the affected versions.
Who is affected by CVE-2011-2010?
CVE-2011-2010 affects users of Microsoft Pinyin IME 2010 and its related styles on both x86 and x64 architectures.
What type of vulnerability is CVE-2011-2010?
CVE-2011-2010 is a local privilege escalation vulnerability in the Microsoft Office Input Method Editor.
Can CVE-2011-2010 be exploited remotely?
CVE-2011-2010 cannot be exploited remotely as it requires local access to the affected systems.