CVE-2011-1262

Estado: ModificadaAlta (9.3)—
Microsoft Internet Explorer 7 hasta la versión 9 no maneja apropiadamente los objetos en memoria, lo que permite a atacantes remotos ejecutar código de su elección accediendo a un objeto que (1) no ha sido apropiadamente inicializado o (2) ha sido borrado, también conocido como "vulnerabilidad de corrupción de memoria HTTP".
CVSS

Versión: 2.0
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Puntuación base: 9.3
Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 17%
Percentil entre todas las CVEs puntuadas: 97
Fecha de la puntuación: 8/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)

Microsoft — Internet Explorer
CWE

CWE-908
Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-1262",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "secure@microsoft.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-06-16T20:55:01.917",
  "references": [
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12405",
      "tags": [
        "Tool Signature"
      ],
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12405",
      "tags": [
        "Tool Signature"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-908"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka \"HTTP Redirect Memory Corruption Vulnerability.\""
    },
    {
      "lang": "es",
      "value": "Microsoft Internet Explorer 7 hasta la versión 9 no maneja apropiadamente los objetos en memoria, lo que permite a atacantes remotos ejecutar código de su elección accediendo a un objeto que (1) no ha sido apropiadamente inicializado o (2) ha sido borrado, también conocido como \"vulnerabilidad de corrupción de memoria HTTP\"."
    }
  ],
  "lastModified": "2026-06-16T23:29:02.620",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:-:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C2EE0AD3-2ADC-480E-B03E-06962EC4F095"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*",
              "vulnerable": false,
              "matchCriteriaId": "C6109348-BC79-4ED3-8D41-EA546A540C79"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A52E757F-9B41-43B4-9D67-3FEDACA71283"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E33796DB-4523-4F04-B564-ADF030553D51"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:-:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C2EE0AD3-2ADC-480E-B03E-06962EC4F095"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "36559BC0-44D7-48B3-86FF-1BFF0257B5ED"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*",
              "vulnerable": false,
              "matchCriteriaId": "C6109348-BC79-4ED3-8D41-EA546A540C79"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E33796DB-4523-4F04-B564-ADF030553D51"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "36559BC0-44D7-48B3-86FF-1BFF0257B5ED"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "secure@microsoft.com"
}