CVE-2011-1889
- State
- Published
- Severity
- 9.8 Critical
- Published
- Jun 16, 2011
- Updated
- Oct 22, 2025
- Reserved
- May 4, 2011
Description
The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability."
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 1025637vdb-entry
- MS11-040vendor-advisory
- ms-tmg-firewall-bo(67736)vdb-entry
- 48181vdb-entry
- 44857third-party-advisory
- oval:org.mitre.oval:def:12642vdb-entrysignature
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-1889government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.