CVE-2011-1889criticalunder attackCWE-119

CVE-2011-1889

Published · Updated

Follow this CVE+ Monitor Forefront Threat Management Gateway

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

70Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 9.8epss 49%
from disclosure to weapon
Published on NVDJun 16
CISA KEV+3913d
Action required by CISAfederal deadline: 2022-03-24

Apply updates per vendor instructions.

In short

A flaw in Microsoft Forefront TMG 2010's firewall client allows attackers to send specially crafted requests that cause memory corruption, leading to arbitrary code execution on affected systems.

Technical detail

The NSPLookupServiceNext function in the TMG 2010 firewall client fails to properly validate input, resulting in a buffer overflow (CWE-119) that can be exploited remotely without authentication. Successful exploitation allows arbitrary code execution with the privileges of the client process.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability."
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a