CVE-2011-1961

The telnet URI handler in Microsoft Internet Explorer 6 through 9 does not properly launch the handler application, which allows remote attackers to execute arbitrary programs via a crafted web site, aka "Telnet Handler Remote Code Execution Vulnerability."

• http://jvn.jp/en/jp/JVN80404511/index.htmlThird Party Advisory, VDB Entry
• http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000060.htmlThird Party Advisory, VDB Entry
• http://www.us-cert.gov/cas/techalerts/TA11-221A.htmlThird Party Advisory, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057Patch, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12684Tool Signature
• http://jvn.jp/en/jp/JVN80404511/index.htmlThird Party Advisory, VDB Entry
• http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000060.htmlThird Party Advisory, VDB Entry
• http://www.us-cert.gov/cas/techalerts/TA11-221A.htmlThird Party Advisory, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057Patch, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12684Tool Signature

Published

Aug 10, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1955Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2011-1956The bytes_repr_len function in Wireshark 1.4.5 uses an incor…
• CVE-2011-1957The dissect_dcm_main function in epan/dissectors/packet-dcm.…
• CVE-2011-1958Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows …
• CVE-2011-1959The snoop_read function in wiretap/snoop.c in Wireshark 1.2.…
• CVE-2011-1960Microsoft Internet Explorer 6 through 9 does not properly im…
• CVE-2011-1962Microsoft Internet Explorer 6 through 9 does not properly ha…
• CVE-2011-1963Microsoft Internet Explorer 7 through 9 does not properly ha…
• CVE-2011-1964Microsoft Internet Explorer 6 through 9 does not properly ha…
• CVE-2011-1965Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold an…
• CVE-2011-1966The DNS server in Microsoft Windows Server 2008 SP2, R2, and…
• CVE-2011-1967Winsrv.dll in the Client/Server Run-time Subsystem (aka CSRS…