CVEvulnerability
CVE-2011-1868
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-06-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate fields in DFS responses, which allows remote DFS servers to execute arbitrary code via a crafted response, aka "DFS Memory Corruption Vulnerability."
Affected configurations
• microsoft windows 2003 server
• microsoft windows server 2003
• microsoft windows xp
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/44894 secunia.com
- http://www.securityfocus.com/bid/48180 www.securityfocus.com
- http://www.securitytracker.com/id?1025639 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-042 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67726 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11758 oval.cisecurity.org
- http://secunia.com/advisories/44894 secunia.com
- http://www.securityfocus.com/bid/48180 www.securityfocus.com
- http://www.securitytracker.com/id?1025639 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-042 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67726 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11758 oval.cisecurity.org