CVE-2011-1889

Опубликовано: 16 июн. 2011

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Высокий

Описание

The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability."

Ссылки

http://secunia.com/advisories/44857
Broken Link
http://www.securityfocus.com/bid/48181
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1025637
Broken Link
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-040
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/67736
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12642
Broken Link
http://secunia.com/advisories/44857
Broken Link
http://www.securityfocus.com/bid/48181
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1025637
Broken Link
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-040
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/67736
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12642
Broken Link
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-1889

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:microsoft:forefront_threat_management_gateway:2010:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.87578

Высокий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-v7xg-xv38-f34w