{ "schema_version": "1.4.0", "id": "GHSA-jqgx-79r9-98mr", "modified": "2022-05-13T01:15:37Z", "published": "2022-05-13T01:15:37Z", "aliases": [ "CVE-2011-4434" ], "details": "Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 do not properly enforce AppLocker rules, which allows local users to bypass intended access restrictions via a (1) macro or (2) scripting feature in an application, as demonstrated by Microsoft Office applications and the SANDBOX_INERT and LOAD_IGNORE_CODE_AUTHZ_LEVEL flags.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4434" }, { "type": "WEB", "url": "http://support.microsoft.com/kb/2532445" } ], "database_specific": { "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2011-11-11T21:55:00Z" } }