CVE-2011-0037

Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key.

Score

CVSS 2.0 7.2 High

Status

Modified - secure@microsoft.com

Published

2011-02-25

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Forefront Client Security (Microsoft)
• Forefront Endpoint Protection 2010 (Microsoft)
• Malicious Software Removal Tool (Microsoft)
• Malware Protection Engine (Microsoft)
• Security Essentials (Microsoft)
• Windows Defender (Microsoft)
• Windows Live Onecare (Microsoft)

References

• http://secunia.com/advisories/43468
• http://securitytracker.com/id?1025117
• http://www.microsoft.com/technet/security/advisory/2491888.mspx
• http://www.securityfocus.com/bid/46540
• http://www.vupen.com/english/advisories/2011/0486
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65626