CoreCVE
Back

MEDIUM

Microsoft Windows does not properly warn the user before enabling additional Human Interface Device (HID) functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a smartphone that the user connected to the computer

Published Jan 25, 2011

Description

Microsoft Windows does not properly warn the user before enabling additional Human Interface Device (HID) functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a smartphone that the user connected to the computer.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-16

References (4)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jan 25, 2011
Updated Aug 6, 2024
Reserved Jan 24, 2011
Link CVE-2011-0638
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2011-0638
Red Hat
Severity n/a
Public date n/a
Links CVE-2011-0638