CVE-2011-2010
Last modified
CVE-2011-2010 is a vulnerability of currently unknown severity. The Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the Microsoft Pinyin (aka MSPY) IME toolbar, aka "Pinyin IME Elevation Vulnerability.". EPSS estimates a 1.80% chance of exploitation in the next 30 days.
Description
The Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the Microsoft Pinyin (aka MSPY) IME toolbar, aka "Pinyin IME Elevation Vulnerability."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Pinyin Ime | 2010 |
| Microsoft | Pinyin New Experience Style | 2010 |
| Microsoft | Pinyin Simple Fast Style | 2010 |
References
- http://www.us-cert.gov/cas/techalerts/TA11-347A.htmlUS Government Resource
- http://www.us-cert.gov/cas/techalerts/TA11-347A.htmlUS Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-2010?
How severe is CVE-2011-2010?
How do I fix CVE-2011-2010?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2011
- CVE-2011-2004Array index error in win32k.sys in the kernel-mode drivers i…
- CVE-2011-2005afd.sys in the Ancillary Function Driver in Microsoft Window…7.8
- CVE-2011-2006Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2011-2007Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, …
- CVE-2011-2008Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, …
- CVE-2011-2009Untrusted search path vulnerability in Windows Media Center …
- CVE-2011-2011Use-after-free vulnerability in win32k.sys in the kernel-mod…
- CVE-2011-2012Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, …
- CVE-2011-2013Integer overflow in the TCP/IP implementation in Microsoft W…9.8
- CVE-2011-2014The LDAP over SSL (aka LDAPS) implementation in Active Direc…
- CVE-2011-2015Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2011-2016Untrusted search path vulnerability in Windows Mail and Wind…7.3
Are you affected by CVE-2011-2010?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST