CVE-2011-1889
9.8 Critique Exploitée activementCatalogue CISA KEV — Microsoft Forefront TMG Remote Code Execution Vulnerability
Ajoutée le 03/03/2022 · Échéance de correction (agences US) : 24/03/2022
Action requise : Apply updates per vendor instructions.
Description
The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability."
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 9.8 Critique | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | 9.8 Critique | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | 10.0 Élevée | nvd@nist.gov (NVD) | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Faiblesses (CWE)
Références
- http://secunia.com/advisories/44857 Broken Link
- http://www.securityfocus.com/bid/48181 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id?1025637 Broken LinkThird Party AdvisoryVDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-040 PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67736 Third Party AdvisoryVDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12642 Broken Link
- http://secunia.com/advisories/44857 Broken Link
- http://www.securityfocus.com/bid/48181 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id?1025637 Broken LinkThird Party AdvisoryVDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-040 PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67736 Third Party AdvisoryVDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12642 Broken Link
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-1889 US Government Resource