9.8Crítica
KEV
CVE-2011-1889Microsoft Forefront TMG Remote Code Execution Vulnerability
Explotación conocida — Microsoft Forefront TMG Remote Code Execution Vulnerability
CISA confirmó el 03.03.2022 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 24.03.2022.
Acción requerida: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2011-1889
Descripción
The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability."
Debilidad (CWE):
CWE-119
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| microsoft | forefront threat management gateway | 2010 |
Referencias y parches
- 1025637 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- MS11-040 vendor-advisoryPatchVendor Advisory
- ms-tmg-firewall-bo(67736) vdb-entryThird Party AdvisoryVDB Entry
- 48181 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- 44857 third-party-advisoryBroken Link
- oval:org.mitre.oval:def:12642 vdb-entrysignatureBroken Link
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-1889 US Government Resource
Coincidencias CPE (NVD) (1)
cpe:2.3:a:microsoft:forefront_threat_management_gateway:2010:*:*:*:*:*:*:*