CVE-2011-1345

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 8

Description A remote code execution issue exists due to improper handling of objects in memory. This allows attackers to execute arbitrary code by accessing an object that was not properly initialized or has been deleted. An attacker could exploit this by constructing a specially crafted Web page, potentially gaining the same user rights as the logged-on user. If the user has administrative rights, the attacker could take complete control of the system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Internet Explorer versions 6 through 8, consider applying security updates or patches that address the object management memory corruption issue to prevent remote code execution. As a temporary workaround, consider restricting access to specially crafted Web pages that could exploit the vulnerability until a patch is available.