Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown…

Description

Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Stephen Fewer as the second of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011.

Scores

EPSS (exploitation in 30 days)

26.2% · top 2.0% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 9.3.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (8)

• http://twitter.com/msftsecresponse/statuses/45646985998516224 (opens in a new tab)x_refsource_MISCx_transferred
• http://twitter.com/aaronportnoy/statuses/45642180118855680 (opens in a new tab)x_refsource_MISCx_transferred
• http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011 (opens in a new tab)x_refsource_MISCx_transferred
• http://www.computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own (opens in a new tab)x_refsource_MISCx_transferred
• ie-unspec-code-exec(66063) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• 46821 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011 (opens in a new tab)x_refsource_MISCx_transferred
• http://www.zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367 (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Record last updated 6 Aug 2024, 22:21 UTC.