CVE-2011-1255
The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet...
The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Time Element Memory Corruption Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Time Element Memory Corruption Vulnerability."
- Record
CVE-2011-1255- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-908
- Updated
- 2026-11-02
CVE List No score
The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Time Element Memory Corruption Vulnerability."
- Record
CVE-2011-1255- Updated
- 2026-11-02
EUVDEUVD-2011-1263 No score
The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Time Element Memory Corruption Vulnerability."
- Record
EUVD-2011-1263- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7rfx-6cch-fq94 No score
The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet...
The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Time Element Memory Corruption Vulnerability."
- Record
GHSA-7rfx-6cch-fq94- Weakness
- CWE-908
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Internet Explorer - Time Element Memory Corruption (MS11-050) | 2012-08-16 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1255 is a high vulnerability (CVSS 9.3) in Microsoft Internet Explorer, published June 16, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 42.1%, the 98th percentile. No source names a fixed version.
References
osvdb.org/72947
blogs.technet.com/b/srd/archive/2011/06/14/ms11-050-ie9-is-better.aspx
docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12227
nvd.nist.gov/vuln/detail/CVE-2011-1255
github.com/advisories/GHSA-7rfx-6cch-fq94