Vulnerability in Microsoft Internet Explorer
CVE-2011-0038
Untrusted search path vulnerability in Microsoft Internet Explorer 8 might allow local users to gain privileges via a Trojan horse IEShims.dll in the current working directory, as demonstrated by a Desktop directory that contains an HTML file, aka "Internet Explorer Insecure Library Loading Vulnerability."
EPSS: 0.112 (95.5th percentile) — read the EPSS interpretation.
Affected products
References
- secure@microsoft.com (x_refsource_OSVDB, vdb-entry)
- secure@microsoft.com (vdb-entry, x_refsource_BID)
- secure@microsoft.com (x_refsource_CONFIRM)
- secure@microsoft.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- secure@microsoft.com (vdb-entry, x_refsource_XF)
- secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (x_refsource_MISC)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)