CVE-2011-1265: Code Injection

Published Jul 13, 2011

Updated

The Bluetooth Stack 2.1 in Microsoft Windows Vista SP1 and SP2 and Windows 7 Gold and SP1 does not prevent access to objects in memory that (1) were not properly initialized or (2) have been deleted, which allows remote attackers to execute arbitrary code via crafted Bluetooth packets, aka "Bluetooth Stack Vulnerability."

Affected Software

4 affected components

Microsoft Windows 7=sp1

Bluetooth Bluetooth Stack=2.1

Microsoft Windows Vista=sp1

Microsoft Windows Vista=sp2

Remediation

Patch Available

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-053

Event History

Jul 13, 2011

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-1265?

The severity of CVE-2011-1265 is rated as critical, given its potential for remote code execution.

How do I fix CVE-2011-1265?

To fix CVE-2011-1265, you should apply the latest security updates and patches from Microsoft.

What systems are affected by CVE-2011-1265?

CVE-2011-1265 affects Microsoft Windows Vista SP1, SP2, and Windows 7 Gold and SP1.

Can CVE-2011-1265 be exploited through Bluetooth?

Yes, CVE-2011-1265 can be exploited through crafted Bluetooth packets sent to vulnerable devices.

What are the potential impacts of CVE-2011-1265?

The potential impacts of CVE-2011-1265 include remote code execution, allowing attackers to compromise the affected system.