Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2011-0037

Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key.

Published

2011-02-25T18:00:01.213

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.2 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application microsoft forefront_client_security * Yes
Application microsoft forefront_endpoint_protection_2010 - Yes
Application microsoft malicious_software_removal_tool * Yes
Application microsoft malware_protection_engine ≤ 1.1.6502.0 Yes
Application microsoft malware_protection_engine 0.1.13.192 Yes
Application microsoft malware_protection_engine 1.1.3520.0 Yes
Application microsoft security_essentials * Yes
Application microsoft windows_defender * Yes
Application microsoft windows_live_onecare * Yes
References