Published: 16/02/2011 Updated: 26/02/2019

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser.sys in Active Directory in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote malicious users to execute arbitrary code or cause a denial of service (system crash) via a malformed BROWSER ELECTION message, leading to a heap-based buffer overflow, aka "Browser Pool Corruption Vulnerability." NOTE: some of these details are obtained from third party information.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows 2003 server
microsoft windows server 2003

#################################################################################### #MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Remote Heap Overflow #Release date: 2011-02-14 #Author: Cupidon-3005 #Greet: Winny Thomas, Laurent Gaffie, h07 #Bug: Heap Overflow #Remote Exploitability: Unlikely #Local Exploitability: Likely #Context: Broadcas ...

CWE-119 http://www.securityfocus.com/bid/46360 http://www.exploit-db.com/exploits/16166 http://blogs.technet.com/b/mmpc/archive/2011/02/16/my-sweet-valentine-the-cifs-browser-protocol-heap-corruption-vulnerability.aspx http://blogs.technet.com/b/srd/archive/2011/02/16/notes-on-exploitability-of-the-recent-windows-browser-protocol-issue.aspx http://www.vupen.com/english/advisories/2011/0394 http://secunia.com/advisories/43299 http://www.vupen.com/english/advisories/2011/0938 http://www.securitytracker.com/id?1025328 http://www.us-cert.gov/cas/techalerts/TA11-102A.html http://www.kb.cert.org/vuls/id/323172 http://archives.neohapsis.com/archives/fulldisclosure/2011-02/0284.html https://exchange.xforce.ibmcloud.com/vulnerabilities/65376 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12637 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-019 https://nvd.nist.gov https://www.exploit-db.com/exploits/16166/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-0654

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect