CVE-2011-1260

Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability."

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

60.85% chance of exploitation in the next 30 days, 99th percentile

Published

2011-06-16

Updated

2024-08-06

Proof-of-concept exploits (1)

• SkyBulk/the-day-of-nightmares18★ · 2019-05-03

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms11_050_mshtml_…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/17409

References

• CVE Record
• NVD entry

Related

• CVE-2013-3893
• CVE-2018-5129
• CVE-2019-0539
• CVE-2011-1255
• CVE-2011-1271
• CVE-2011-1249