Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMicrosoftCVE-2011-1889
HistoryJun 16, 2011 - 8:55 p.m.

CVE-2011-1889

2011-06-1620:55:02
CWE-119
microsoft
web.nvd.nist.gov
845
In Wild
microsoft
forefront
threat management gateway
tmg 2010
nsplookupservicenext
remote code execution
memory corruption
vulnerability
cve-2011-1889

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.804

Percentile

98.4%

JSON

The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka “TMG Firewall Client Memory Corruption Vulnerability.”

Affected configurations

Nvd
Node
microsoftforefront_threat_management_gatewayMatch2010
VendorProductVersionCPE
microsoftforefront_threat_management_gateway2010cpe:2.3:a:microsoft:forefront_threat_management_gateway:2010:*:*:*:*:*:*:*

Related

checkpoint_advisories 2
seebug 1
securityvulns 1
mskb 1
cisa_kev 1
openvas 2
prion 1
attackerkb 1
nessus 1
cvelist 1
nvd 1
checkpoint_advisories
checkpoint_advisories
Microsoft Threat Mgmt Gateway Firewall Client DNS Lookup Buffer Overflow - Ver2 (CVE-2011-1889)
2018-07-02 00:00:00
Microsoft Forefront TMG Memory Corruption Remote Code Execution (MS11-040; CVE-2011-1889)
2011-07-19 00:00:00
seebug
seebug
Microsoft Forefront Threat Management Gateway (TMG)防火墙客户端内存破坏漏洞
2011-06-16 00:00:00
securityvulns
securityvulns
Microsoft Forefront Threat Management Gateway Firewall Client memory corruption
2011-06-15 00:00:00
mskb
mskb
MS11-040: Vulnerability in Threat Management Gateway Firewall Client could cause remote code execution: June 14, 2011
2011-06-14 00:00:00
cisa_kev
cisa_kev
Microsoft Forefront TMG Remote Code Execution Vulnerability
2022-03-03 00:00:00
openvas
openvas
MS Windows Threat Management Gateway Firewall Client Remote Code Execution Vulnerability (2520426)
2011-06-15 00:00:00
Microsoft Windows Threat Management Gateway Firewall Client Remote Code Execution Vulnerability (2520426)
2011-06-15 00:00:00
prion
prion
Memory corruption
2011-06-16 20:55:00
attackerkb
attackerkb
CVE-2011-1889
2011-06-16 00:00:00
nessus
nessus
MS11-040: Vulnerability in Threat Management Gateway Firewall Client Could Allow Remote Code Execution (2520426)
2011-06-15 00:00:00
cvelist
cvelist
CVE-2011-1889
2011-06-16 20:21:00
nvd
nvd
CVE-2011-1889
2011-06-16 20:55:02

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.804

Percentile

98.4%

JSON
Related for CVE-2011-1889
checkpoint_advisories2seebug1securityvulns1mskb1cisa_kev1openvas2prion1attackerkb1nessus1cvelist1nvd1