CVE-2011-1243
The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows...
The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via unspecified vectors that "corrupt the system state," aka "Microsoft Windows Messenger ActiveX Control Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via unspecified vectors that "corrupt the system state," aka "Microsoft Windows Messenger ActiveX Control Vulnerability."
- Record
CVE-2011-1243- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via unspecified vectors that "corrupt the system state," aka "Microsoft Windows Messenger ActiveX Control Vulnerability."
- Record
CVE-2011-1243- Updated
- 2026-11-02
EUVDEUVD-2011-1251 No score
The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via unspecified vectors that "corrupt the system state," aka "Microsoft Windows Messenger ActiveX Control Vulnerability."
- Record
EUVD-2011-1251- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r5g4-c3vm-vwhj No score
The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows...
The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via unspecified vectors that "corrupt the system state," aka "Microsoft Windows Messenger ActiveX Control Vulnerability."
- Record
GHSA-r5g4-c3vm-vwhj- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1243 is a high vulnerability (CVSS 9.3) in Microsoft Windows Xp, published April 13, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 29.3%, the 98th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12524
securityfocus.com/bid/47197
osvdb.org/71788
docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027
secunia.com/advisories/44159
nvd.nist.gov/vuln/detail/CVE-2011-1243
github.com/advisories/GHSA-r5g4-c3vm-vwhj