CVE-2011-1868

The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate fields in DFS responses, which allows remote DFS servers to execute arbitrary code via a crafted response, aka "DFS Memory Corruption Vulnerability."

Score

CVSS 2.0 10.0 Critical

Status

Modified - secure@microsoft.com

Published

2011-06-16

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Windows 2003 Server (Microsoft)
• Windows Server 2003 (Microsoft)
• Windows Xp (Microsoft)

References

• http://secunia.com/advisories/44894
• http://www.securityfocus.com/bid/48180
• http://www.securitytracker.com/id?1025639
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-042
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67726
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11758