CVE-2011-4695 Information

Description

Unspecified vulnerability in Microsoft Windows 7 SP1 when Java is installed allows local users to bypass Internet Explorer sandbox restrictions and gain privileges via unknown vectors as demonstrated by the White Phosphorus wp_ie_sandbox_escape module for Immunity CANVAS. NOTE: as of 20111207 this disclosure has no actionable information. However because the module author is a reliable researcher the issue is being assigned a CVE identifier for tracking purposes.

Reference

http://partners.immunityinc.com/movies/VulnDisco-Flash0day-v2.mov https://lists.immunityinc.com/pipermail/dailydave/2011-December/000402.html

Share on: