CVE-2011-0037 (CNNVD-201102-376)
中文标题:
Microsoft多个产品Malware Protection Engine权限提升漏洞
英文标题:
Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Remov...
漏洞描述
中文描述:
Microsoft Malware Protection Engine是微软反恶意软件产品的一部分。 用于Microsoft Malicious Software Removal Tool（MSRT），Windows Defender，Security Essentials，Forefront Client Security，Forefront Endpoint Protection 2010，和Windows Live OneCare的Microsoft Malware Protection Engine 1.1.6603.0之前版本中存在漏洞。本地用户可以借助未明用户注册表项的特制值获取特权。
英文描述:
Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| microsoft | forefront_client_security | * | - | - |
cpe:2.3:a:microsoft:forefront_client_security:*:*:*:*:*:*:*:*
|
| microsoft | forefront_endpoint_protection_2010 | - | - | - |
cpe:2.3:a:microsoft:forefront_endpoint_protection_2010:-:*:*:*:*:*:*:*
|
| microsoft | malicious_software_removal_tool | * | - | - |
cpe:2.3:a:microsoft:malicious_software_removal_tool:*:*:*:*:*:*:*:*
|
| microsoft | malware_protection_engine | * | - | - |
cpe:2.3:a:microsoft:malware_protection_engine:*:*:*:*:*:*:*:*
|
| microsoft | malware_protection_engine | 0.1.13.192 | - | - |
cpe:2.3:a:microsoft:malware_protection_engine:0.1.13.192:*:*:*:*:*:*:*
|
| microsoft | malware_protection_engine | 1.1.3520.0 | - | - |
cpe:2.3:a:microsoft:malware_protection_engine:1.1.3520.0:*:*:*:*:*:*:*
|
| microsoft | security_essentials | * | - | - |
cpe:2.3:a:microsoft:security_essentials:*:*:*:*:*:*:*:*
|
| microsoft | windows_defender | * | - | - |
cpe:2.3:a:microsoft:windows_defender:*:*:*:*:*:*:*:*
|
| microsoft | windows_live_onecare | * | - | - |
cpe:2.3:a:microsoft:windows_live_onecare:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
AV:L/AC:L/Au:N/C:C/I:C/A:C
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2011-0037 |
2025-11-11 15:18:20 | 2025-11-11 07:33:13 |
| NVD | nvd_CVE-2011-0037 |
2025-11-11 14:53:42 | 2025-11-11 07:42:01 |
| CNNVD | cnnvd_CNNVD-201102-376 |
2025-11-11 15:09:12 | 2025-11-11 07:49:49 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 授权问题
- cnnvd_id: 未提取 -> CNNVD-201102-376
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- severity: SeverityLevel.MEDIUM -> SeverityLevel.HIGH
- cvss_score: 未提取 -> 7.2
- cvss_vector: NOT_EXTRACTED -> AV:L/AC:L/Au:N/C:C/I:C/A:C
- cvss_version: NOT_EXTRACTED -> 2.0
- affected_products_count: 0 -> 9
- data_sources: ['cve'] -> ['cve', 'nvd']