CVE-2011-1889

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Jun 16, 2011
Updated: Dec 19, 2024
CWE ID 119

Summary

CVE-2011-1889 is a memory corruption vulnerability affecting the NSPLookupServiceNext function in Microsoft Forefront Threat Management Gateway (TMG) 2010. An attacker can exploit this issue by sending unspecified requests to the client, resulting in arbitrary code execution. This vulnerability poses a significant risk as it allows remote attackers to gain control over affected systems. Microsoft released a patch to address this issue, and users are strongly encouraged to apply it to protect against potential exploitations.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Forefront Threat Management Gateway

Affected Vendors

  • Microsoft

Advisories, Assessments, and Mitigations