What is the severity of CVE-2011-2003?

CVE-2011-2003 has a critical severity rating due to its potential to allow remote code execution.

How do I fix CVE-2011-2003?

To fix CVE-2011-2003, update your Microsoft Windows operating system to the latest security patch provided by Microsoft.

Can CVE-2011-2003 be exploited remotely?

Yes, CVE-2011-2003 can be exploited remotely through a specially crafted .fon file.

What type of vulnerability is CVE-2011-2003?

CVE-2011-2003 is a buffer overflow vulnerability in the win32k.sys kernel-mode driver.

Vulnerability/
CVE-2011-2003

critical

9.3

CWE

119

12/10/2011

6/8/2024

CVE-2011-2003: Buffer Overflow

First published: Wed Oct 12 2011(Updated: )

Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon file, aka "Font Library File Buffer Overrun Vulnerability."

Credit: secure@microsoft.com secure@microsoft.com

Affected Software	Affected Version	How to fix
Microsoft Windows 2003 Server	=sp2
Microsoft Windows 7
Microsoft Windows 7	=sp1
Microsoft Windows 7	=sp1
Microsoft Windows Server 2003	=sp2
Microsoft Windows Server 2008 Itanium	=sp2
Microsoft Windows Server 2008 Itanium	=sp2
Microsoft Windows Server 2008 Itanium	=sp2
Microsoft Windows Server 2008 Itanium	=r2
Microsoft Windows Server 2008 Itanium	=r2
Microsoft Windows Vista	=sp2
Microsoft Windows XP	=sp3
Microsoft Windows XP	=sp2
Microsoft Windows Vista	=sp2

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2011-2003?
CVE-2011-2003 has a critical severity rating due to its potential to allow remote code execution.
How do I fix CVE-2011-2003?
To fix CVE-2011-2003, update your Microsoft Windows operating system to the latest security patch provided by Microsoft.
Which systems are affected by CVE-2011-2003?
CVE-2011-2003 affects Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, and Windows 7 Gold and SP1.
Can CVE-2011-2003 be exploited remotely?
Yes, CVE-2011-2003 can be exploited remotely through a specially crafted .fon file.
What type of vulnerability is CVE-2011-2003?
CVE-2011-2003 is a buffer overflow vulnerability in the win32k.sys kernel-mode driver.

agent/references
agent/author
agent/type
agent/severity
agent/weakness
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/event
agent/first-publish-date
agent/source
agent/tags
collector/nvd-api
agent/software-canonical-lookup-request
collector/nvd-historical
collector/nvd-index
agent/softwarecombine
vendor/microsoft
canonical/microsoft windows 2003 server
version/microsoft windows 2003 server/sp2
canonical/microsoft windows 7
version/microsoft windows 7/sp1
canonical/microsoft windows server 2003
version/microsoft windows server 2003/sp2
canonical/microsoft windows server 2008 itanium
version/microsoft windows server 2008 itanium/sp2
version/microsoft windows server 2008 itanium/r2
canonical/microsoft windows vista
version/microsoft windows vista/sp2
canonical/microsoft windows xp
version/microsoft windows xp/sp3
version/microsoft windows xp/sp2

Frequently Asked Questions

What is the severity of CVE-2011-2003?
CVE-2011-2003 has a critical severity rating due to its potential to allow remote code execution.
How do I fix CVE-2011-2003?
To fix CVE-2011-2003, update your Microsoft Windows operating system to the latest security patch provided by Microsoft.
Which systems are affected by CVE-2011-2003?
CVE-2011-2003 affects Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, and Windows 7 Gold and SP1.
Can CVE-2011-2003 be exploited remotely?
Yes, CVE-2011-2003 can be exploited remotely through a specially crafted .fon file.
What type of vulnerability is CVE-2011-2003?
CVE-2011-2003 is a buffer overflow vulnerability in the win32k.sys kernel-mode driver.

CVE-2011-2003: Buffer Overflow

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2011-2003?

How do I fix CVE-2011-2003?

Which systems are affected by CVE-2011-2003?

Can CVE-2011-2003 be exploited remotely?

What type of vulnerability is CVE-2011-2003?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2011-2003?

How do I fix CVE-2011-2003?

Which systems are affected by CVE-2011-2003?

Can CVE-2011-2003 be exploited remotely?

What type of vulnerability is CVE-2011-2003?