Lucene search
HistoryNov 08, 2011 - 9:55 p.m.
CVE-2011-2013
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
High
EPSS
0.191
Percentile
96.4%
Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by sending a sequence of crafted UDP packets to a closed port, aka “Reference Counter Overflow Vulnerability.”
Affected configurations
Node
microsoftwindows_7Match-
ORmicrosoftwindows_7Match-sp1x64
ORmicrosoftwindows_7Match-sp1x86
ORmicrosoftwindows_server_2008sp2x32
ORmicrosoftwindows_server_2008sp2x64
ORmicrosoftwindows_server_2008Match-sp2itanium
ORmicrosoftwindows_server_2008Matchr2itanium
ORmicrosoftwindows_server_2008Matchr2x64
ORmicrosoftwindows_vistasp2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_7 | - | cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:* |
| microsoft | windows_7 | - | cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:* |
| microsoft | windows_7 | - | cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:* |
| microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:* |
| microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:* |
| microsoft | windows_server_2008 | - | cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:* |
| microsoft | windows_server_2008 | r2 | cpe:2.3:o:microsoft:windows_server_2008:r2:*:itanium:*:*:*:*:* |
| microsoft | windows_server_2008 | r2 | cpe:2.3:o:microsoft:windows_server_2008:r2:*:x64:*:*:*:*:* |
| microsoft | windows_vista | * | cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:* |
Related
prion
prion
Integer overflow
2011-11-08 21:55:00
cert
cert
Microsoft Windows UDP packet parsing vulnerability
2011-11-08 00:00:00
cve
cve
CVE-2011-2013
2011-11-08 21:55:01
seebug
seebug
Microsoft Windows TCP/IP引用计数溢出漏洞(MS11-083)
2011-11-09 00:00:00
openvas
openvas
Microsoft Windows TCP/IP Remote Code Execution Vulnerability (2588516)
2011-11-09 00:00:00
Microsoft Windows TCP/IP Remote Code Execution Vulnerability (2588516)
2011-11-09 00:00:00
exploitdb
exploitdb
checkpoint_advisories
checkpoint_advisories
Web Servers UDP Flooding Denial of Service (CVE-2011-2013)
2011-12-06 00:00:00
cvelist
cvelist
CVE-2011-2013
2011-11-08 21:00:00
nessus
nessus
securityvulns
securityvulns
Microsoft Windows kernel UDP processing integer overflow
2011-11-09 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
High
EPSS
0.191
Percentile
96.4%
Related for NVD:CVE-2011-2013