CVE-2011-0096
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Microsoft Windows 是微软发布的非常流行的操作系统。 Microsoft Windows XP SP2和SP3，Windows Server 2003 SP2，Windows Vista SP1和SP2，Windows Server 2008 Gold，SP2及R2和Windows 7中的MHTML协议处理器没有正确处理为文档内容块的请求中的MIME格式。远程攻击者可以借助访问Internet Explorer的特制web站点进行跨站脚本攻击。
Public Exploits 1
ExploitDB · 1
EDB-16071 [local]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2011-0096
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site that is visited in Internet Explorer, aka "MHTML Mime-Formatted Request Vulnerability."
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Windows MHTML协议处理器跨站脚本攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Windows 是微软发布的非常流行的操作系统。 Microsoft Windows XP SP2和SP3，Windows Server 2003 SP2，Windows Vista SP1和SP2，Windows Server 2008 Gold，SP2及R2和Windows 7中的MHTML协议处理器没有正确处理为文档内容块的请求中的MIME格式。远程攻击者可以借助访问Internet Explorer的特制web站点进行跨站脚本攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2011-0096
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2011-0096
请登录查看更多情报信息。
Vendor Advisories for CVE-2011-0096 (10)
-
-
-
-
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-026 vendor-advisory x_refsource_MS
-
-
-
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6956 vdb-entry signature x_refsource_OVAL
-
Exploits & Public PoCs for CVE-2011-0096 (1)
Other References for CVE-2011-0096 (4)
-
http://www.microsoft.com/technet/security/advisory/2501696.mspx x_refsource_CONFIRM
Same Patch Batch · n/a · 2011-01-31 · 22 CVEs total
| CVE-2011-0687 | Opera WAP文档输入验证漏洞 | |
| CVE-2011-0680 | Open Handset Alliance Android Mms应用程序'data/WorkingMessage.java'设计错误漏洞 | |
| CVE-2011-0450 | Opera下载管理器任意代码执行漏洞 | |
| CVE-2010-4717 | Novell GroupWise GWIA IMAP服务器组件任意代码执行漏洞 | |
| CVE-2010-4716 | Novell GroupWise WebPublisher组件跨站脚本攻击漏洞 | |
| CVE-2010-4715 | Novell GroupWise WebAccess Agent和Document Viewer Agent组件多个目录遍历漏洞 | |
| CVE-2010-4714 | Novell GroupWise多个栈缓冲区溢出漏洞 | |
| CVE-2010-4713 | Novell GroupWise GWIA gwia.exe任意代码执行漏洞 | |
| CVE-2010-4712 | Novell GroupWise GWIA gwia.exe 多个栈缓冲区溢出漏洞 | |
| CVE-2010-4711 | Novell GroupWise GWIA IMAP服务器组件双重释放漏洞 | |
| CVE-2011-0688 | Symantec Intel Alert Management System授权问题漏洞 | |
| CVE-2010-0110 | Symantec多个产品Intel Alert Management System多个栈缓冲区溢出漏洞 | |
| CVE-2011-0686 | Opera远程拒绝服务漏洞 | |
| CVE-2011-0685 | Opera Delete Private Data功能输入验证漏洞 | |
| CVE-2011-0684 | Opera输入验证漏洞 | |
| CVE-2011-0683 | Opera点击劫持攻击漏洞 | |
| CVE-2011-0682 | Opera opera.dll整数截断错误漏洞 | |
| CVE-2011-0681 | Opera XML实现CSS扩展CSS过滤安全绕过漏洞 | |
| CVE-2011-0413 | ISC DHCP DNCPv6服务器输入验证错误漏洞 | |
| CVE-2010-4393 | RealNetworks RealPlayer AVI文件解析堆缓冲区溢出漏洞 |
Showing top 20 of 22 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
-
CVE-2026-105156
YzmCMS MD5 system.func.php password weak password hash -
CVE-2026-105149
mooSocial all-products sql injection -
CVE-2026-105144
Drogon Static File Router StaticFileRouter.cc route path tra -
CVE-2026-105137
Laradock Build Process Dockerfile code download -
CVE-2026-51906
TaskingAI v0.3.0 DALL-E 3目录遍历漏洞
V. Comments for CVE-2011-0096
No comments yet