CVE-2011-0037

https://notcve.org/view.php?id=CVE-2011-0037

Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key. Microsoft Malware Protection Engine anterior a v1.1.6603.0, tal como se utilizó en Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, y Windows Live OneCare, permite a usuarios locales conseguir privilegios a través de un valor manipulado de una clave de registro de usuario sin especificar • http://secunia.com/advisories/43468 http://securitytracker.com/id?1025117 http://www.microsoft.com/technet/security/advisory/2491888.mspx http://www.securityfocus.com/bid/46540 http://www.vupen.com/english/advisories/2011/0486 https://exchange.xforce.ibmcloud.com/vulnerabilities/65626 • CWE-20: Improper Input Validation •