CVE-2011-1243

Published: Apr 13, 2011Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via unspecified vectors that "corrupt the system state," aka "Microsoft Windows Messenger ActiveX Control Vulnerability."

Affected (2)

Products: Microsoft: Windows Xp

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (10)

http://osvdb.org/71788

Source: secure@microsoft.com

http://secunia.com/advisories/44159

Source: secure@microsoft.com

http://www.securityfocus.com/bid/47197

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12524

Source: secure@microsoft.com

http://osvdb.org/71788

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/44159

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/47197

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12524

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.