CVE-2011-1247

Description

Untrusted search path vulnerability in the Microsoft Active Accessibility component in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Active Accessibility Insecure Library Loading Vulnerability.

Risk Information

Base Score

7.8

MODERATE

Vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

17.044

Associated Vulnerability

Vulnerability	OS Platform
Security Update for Windows XP (KB2564958)	Windows
Security Update for Windows Server 2003 (KB2564958)	Windows
Security Update for Windows Vista (KB2564958)	Windows
Security Update for Windows Server 2008 (KB2564958)	Windows
Security Update for Windows 7 (KB2564958) x86 based systems	Windows
Security Update for Windows 7 (KB2564958) x86 based systems for SP1	Windows
Security Update for Windows XP x64 Edition (KB2564958)	Windows
Security Update for Windows Server 2003 x64 Edition (KB2564958)	Windows
Security Update for Windows Vista for x64-based Systems (KB2564958)	Windows
Security Update for Windows Server 2008 x64 Edition (KB2564958)	Windows
Security Update for Windows 7 for x64-based Systems (KB2564958)	Windows
Security Update for Windows 7 for x64-based Systems (KB2564958) for SP1	Windows
Security Update for Windows Server 2008 R2 x64 Edition (KB2564958)	Windows
Security Update for Windows Server 2008 R2 x64 Edition (KB2564958) for SP1	Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-10945	Security Update for Windows 7 (KB2564958)
PATCH-10951	Security Update for Windows 7 for x64-based Systems (KB2564958)
PATCH-10953	Security Update for Windows Server 2008 R2 x64 Edition (KB2564958)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234