CVE-2011-1868: Buffer Overflow
First published: Thu Jun 16 2011(Updated: )
The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate fields in DFS responses, which allows remote DFS servers to execute arbitrary code via a crafted response, aka "DFS Memory Corruption Vulnerability."
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows XP | =sp2 | |
| Microsoft Windows XP | =sp3 | |
| Microsoft Windows Server | =sp2 | |
| Microsoft Windows Server 2003 | =sp2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/44894
- http://www.securityfocus.com/bid/48180
- http://www.securitytracker.com/id?1025639
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67726
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11758
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-042
Frequently Asked Questions
What is the severity of CVE-2011-1868?
CVE-2011-1868 has a critical severity rating due to its potential for remote code execution.
How do I fix CVE-2011-1868?
To address CVE-2011-1868, apply the latest security patches provided by Microsoft for affected versions.
What versions of Windows are affected by CVE-2011-1868?
CVE-2011-1868 affects Windows XP SP2, Windows XP SP3, and Windows Server 2003 SP2.
Can CVE-2011-1868 be exploited remotely?
Yes, CVE-2011-1868 can be exploited remotely when a malicious DFS server sends a crafted response.
What are the potential consequences of CVE-2011-1868 exploitation?
Exploitation of CVE-2011-1868 can lead to arbitrary code execution, allowing attackers to gain control of the affected system.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft windows xp
- version/microsoft windows xp/sp2
- version/microsoft windows xp/sp3
- canonical/microsoft windows server
- version/microsoft windows server/sp2
- canonical/microsoft windows server 2003
- version/microsoft windows server 2003/sp2