5
CVE-2011-2008
- EPSS 21.35%
- Veröffentlicht 12.10.2011 02:52:43
- Zuletzt bearbeitet 16.06.2026 23:30:35
- Erkennungen
Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Access of Unallocated Memory DoS Vulnerability."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Host Integration Server Version 2004 Update sp1
Microsoft ≫ Host Integration Server Version 2006 Update sp1
Microsoft ≫ Host Integration Server Version 2009
Microsoft ≫ Host Integration Server Version 2010
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 21.35% | 0.973 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-082
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12915