PT-2011-3512 · Microsoft · Windows Server 2008 R2+2

Publicado 2011-08-10 · Atualizado 2020-09-28 · CVE-2011-1970

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 R2 SP1

Description The issue is related to the DNS server in Microsoft Windows, which does not properly initialize memory. This can be exploited by remote attackers to cause a denial of service via a query for a nonexistent domain.

Recommendations For Microsoft Windows Server 2003 SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 R2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 R2 SP1, update to a newer version to mitigate the risk.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-1970

Produtos afetados

Windows Server 2003 Sp2

Windows Server 2008 R2

Windows Server 2008 R2 Sp1

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2011-1970 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12870 · Nota
• http://us-cert.gov/cas/techalerts/TA11-221A.html · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-058 · Aviso do Fabricante