CVE-2011-0347

high

Description

Microsoft Internet Explorer on Windows XP allows remote attackers to trigger an incorrect GUI display and have unspecified other impact via vectors related to the DOM implementation, as demonstrated by cross_fuzz.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12514

https://exchange.xforce.ibmcloud.com/vulnerabilities/64571

http://www.securityfocus.com/archive/1/515506/100/0/threaded

http://www.microsoft.com/technet/security/advisory/2490606.mspx

http://lcamtuf.coredump.cx/cross_fuzz/msie_display.jpg

http://lcamtuf.coredump.cx/cross_fuzz/fuzzer_timeline.txt

http://lcamtuf.blogspot.com/2011/01/announcing-crossfuzz-potential-0-day-in.html

http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx

http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0698.html

Details

Source: Mitre, NVD

Published: 2011-01-07

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H