CVE-2011-4434

Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 do not properly enforce AppLocker rules, which allows local users to bypass intended access restrictions via a (1) macro or (2) scripting feature in an application, as demonstrated by Microsoft Office applications and the SANDBOX_INERT and LOAD_IGNORE_CODE_AUTHZ_LEVEL flags.

Score

CVSS 2.0 3.6 Low

Status

Modified - cve@mitre.org

Published

2011-11-11

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Windows 7 (Microsoft)
• Windows Server 2008 (Microsoft)

References

• http://support.microsoft.com/kb/2532445