CVE-2011-0037
High
Description
Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key.
SeverityHigh
CVSS7.2
Exploit probability—
Product
Microsoft Forefront Client Security
PublishedFeb 25, 2011
First seenFeb 25, 2011
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microsoft forefront_client_security | No range specified | — |
| microsoft forefront_endpoint_protection_2010 | No range specified | — |
| microsoft malicious_software_removal_tool | No range specified | — |
| microsoft malware_protection_engine | v ≤ 1.1.6502.0, 0.1.13.192, 1.1.3520.0 | — |
| microsoft security_essentials | No range specified | — |
| microsoft windows_defender | No range specified | — |
| microsoft windows_live_onecare | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.