CVE-2011-1970

The DNS server in Microsoft Windows Server 2003 SP2 and Windows Server 2008 SP2, R2, and R2 SP1 does not properly initialize memory, which allows remote attackers to cause a denial of service (service outage) via a query for a nonexistent domain, aka "DNS Uninitialized Memory Corruption Vulnerability."
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:*:x64:*:*:*:*:*

History

No history.

Information

Published : 2011-08-10 21:55

Updated : 2023-12-10 11:03


NVD link : CVE-2011-1970

Mitre link : CVE-2011-1970

CVE.ORG link : CVE-2011-1970


JSON object : View

Products Affected

microsoft

  • windows_server_2003
  • windows_server_2008
  • windows_2003_server
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer