PT-2011-3551 · Microsoft · Windows Vista+3

Published 2011-11-08 · Updated 2024-10-17 · CVE-2011-2013

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1

Description A remote code execution issue exists due to an integer overflow in the TCP/IP implementation, allowing attackers to execute arbitrary code by sending specially crafted UDP packets to a closed port. This could enable an attacker to run arbitrary code in kernel mode, potentially leading to the installation of programs, viewing, changing, or deleting data, or creating new accounts with full user rights.

Recommendations For Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1, update to a newer version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Integer Overflow

Weakness Enumeration

CWE-190

CWE-189

Related Identifiers

CVE-2011-2013

Affected Products

Windows

Windows 7

Windows Server 2008

Windows Vista

References · 8

• 🔥 https://exploit-db.com/exploits/36285 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-083 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2013 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-2013 · Security Note
• http://securitytracker.com/id?1026290 · Note
• http://technet.microsoft.com/en-us/security/bulletin/MS11-083 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13877 · Note
• https://t.me/cvenotify/98657 · Telegram Post