{"id":"CVE-2011-1255","published":"2011-06-16T20:21:00Z","modified":"2024-08-06T22:21:33Z","title":"The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka \"Time Element Memory Corruption Vulnerability.\"","provenance":"source","from":"CVE.org"},"summary":{"text":"The HTML+TIME (Timed Interactive Multimedia Extensions) implementation in Microsoft Internet Explorer 6 through 8 mishandles objects in memory, leaving it open to memory corruption flaws, including use of objects that were not properly initialized or that have been deleted.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:10Z"},"cvss":null,"epss":{"score":0.42103,"percentile":0.98688,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2016-02-23","exploitedFirstSeen":"2016-02-23","ransomware":false,"evidence":[{"url":"https://s7d2.scene7.com/is/content/cylance/prod/cylance-web/en-us/resources/knowledge-center/resource-library/reports/Op_Dust_Storm_Report.pdf","date":"2016-02-23"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":5,"pulses":[{"name":"2016: Malware Analysis Report","url":"https://otx.alienvault.com/pulse/69f4eba31a8adb1aa8e6654d","created":"2026-05-01"},{"name":"VirusTotal report\n                    for Bang Bang#2.xls","url":"https://otx.alienvault.com/pulse/69b4e2ca96bf79781b0ae3bd","created":"2026-03-14"},{"name":"CVE Data","url":"https://otx.alienvault.com/pulse/69929b597293fe5837b9c95c","created":"2026-02-16"},{"name":"CVE -CVE Reference Map for Source MS - Curios RE active candidates CVE version 20061101","url":"https://otx.alienvault.com/pulse/679c3446de4f362fac9217f9","created":"2025-01-31"},{"name":"Operation Dust Storm","url":"https://otx.alienvault.com/pulse/56cc9cef67db8c5860d25aef","created":"2016-02-23"}],"provenance":"machine"},"cwes":[],"references":[{"url":"http://osvdb.org/72947","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://blogs.technet.com/b/srd/archive/2011/06/14/ms11-050-ie9-is-better.aspx","tags":["x_refsource_CONFIRM"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050","tags":["vendor-advisory","x_refsource_MS"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12227","tags":["vdb-entry","signature","x_refsource_OVAL"]}],"techniques":[],"reports":[{"id":"SRC-bd66404e0d19e11c07fa","title":"Operation Dust Storm","publisher":"s7d2.scene7.com","url":"https://s7d2.scene7.com/is/content/cylance/prod/cylance-web/en-us/resources/knowledge-center/resource-library/reports/Op_Dust_Storm_Report.pdf","date":null,"mentions":[{"quote":"8 vulnerability, CVE-2011-1255, to gain a foothold into","start":3886,"end":3941}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2011-1263","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-1263","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":20547,"url":"https://www.exploit-db.com/exploits/20547","title":"Microsoft Internet Explorer - Time Element Memory Corruption (MS11-050)","type":"remote","platform":"windows","date":"2012-08-16","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2012-08-16"},"first":{"date":"2012-08-16","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/20547"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2011-06-16","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2011-1255","provenance":"source"},{"date":"2012-08-16","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-20547)","url":"https://www.exploit-db.com/exploits/20547","provenance":"source"},{"date":"2016-02-23","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://s7d2.scene7.com/is/content/cylance/prod/cylance-web/en-us/resources/knowledge-center/resource-library/reports/Op_Dust_Storm_Report.pdf","provenance":"source"}],"speed":{"daysToPublicExploit":427,"firstExploitFrom":"Exploit-DB","daysToKev":null},"priority":{"score":65.4,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 3901 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.74,"detail":"percentile 0.9869"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"1 Exploit-DB entry"},{"name":"Mentioned in OTX pulses","points":1.77,"detail":"5 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}