CVE-2011-1248 describes a critical vulnerability in the Windows Internet Name Service (WINS) of Microsoft Windows Server 2003 SP2 and Server 2008 (Gold, SP2, R2, and R2 SP1). The flaw stems from improper handling of socket send exceptions, allowing remote attackers to execute arbitrary code or cause a denial of service through memory corruption via specially crafted packets. With a CVSS score of 9.3, this vulnerability is highly severe, requiring no authentication and having high impact on confidentiality, integrity, and availability, though it has a medium attack complexity. While not listed in CISA's KEV catalog, public exploit code exists (EDB-17830), indicating potential for exploitation, despite a lack of active exploitation reports or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:* | ||
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:* | ||
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:* | ||
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_server_2008:-:*:x64:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.