CVE-2011-0037

Published: Feb 25, 2011Modified: Apr 29, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key.

Affected (9)

Products: Microsoft: Forefront Client Security, Forefront Endpoint Protection 2010, Malicious Software Removal Tool, Malware Protection Engine, Security Essentials, Windows Defender, Windows Live Onecare

Microsoft

7 products

Forefront Client Security

Forefront Endpoint Protection 2010

Malicious Software Removal Tool

Malware Protection Engine

Security Essentials

Windows Defender

Windows Live Onecare

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Microsoft Forefront Client Security	All versions
Microsoft Forefront Endpoint Protection 2010	All versions
Microsoft Malicious Software Removal Tool	All versions
Microsoft Malware Protection Engine	Up to 1.1.6502.0
Microsoft Malware Protection Engine	Version 0.1.13.192
Microsoft Malware Protection Engine	Version 1.1.3520.0
Microsoft Security Essentials	All versions
Microsoft Windows Defender	All versions
Microsoft Windows Live Onecare	All versions