CVE-2011-1969
Severity Score
8.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on client machines via unspecified vectors, aka "Poisoned Cup of Code Execution Vulnerability."
Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2 y SP1 incluye el archivo MicrosoftClient.jar que contiene un applet de Java firmado, lo que permite a atacantes remotos ejecutar código de su elección en las máquinas clientes a través de vectores no especificados. También conocida como "Vulnerabilidad de ejecución de código de copa envenenada".
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-05-09 CVE Reserved
- 2011-10-12 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-94: Improper Control of Generation of Code ('Code Injection')
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/49983 | Vdb Entry | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13032 | Signature |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-079 | 2018-10-12 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Microsoft Search vendor "Microsoft" | Forefront Unified Access Gateway Search vendor "Microsoft" for product "Forefront Unified Access Gateway" | 2010 Search vendor "Microsoft" for product "Forefront Unified Access Gateway" and version "2010" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Forefront Unified Access Gateway Search vendor "Microsoft" for product "Forefront Unified Access Gateway" | 2010 Search vendor "Microsoft" for product "Forefront Unified Access Gateway" and version "2010" | sp1 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Forefront Unified Access Gateway Search vendor "Microsoft" for product "Forefront Unified Access Gateway" | 2010 Search vendor "Microsoft" for product "Forefront Unified Access Gateway" and version "2010" | update1 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Forefront Unified Access Gateway Search vendor "Microsoft" for product "Forefront Unified Access Gateway" | 2010 Search vendor "Microsoft" for product "Forefront Unified Access Gateway" and version "2010" | update2 |
Affected
| ||||||