Unscored CVE-2011-1966 EUVD-2011-1960GHSA-957w-cpvh-vjg7

The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processin…

Published Aug 10, 2011 · Updated Aug 6, 2024 · Assigned by microsoft

Description

The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."

References

oval:org.mitre.oval:def:12764 vdb-entry signature
MS11-058 vendor-advisory
TA11-221A third-party-advisory