CVE-2011-1889 The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests...
CriticalCVSS 9.8
EPSS 49.0%
CISA KEV
added 2022-03-03 · due 2022-03-24
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability."
CISA Known Exploited Vulnerability
- Date added
- 2022-03-03
- Due date (FCEB)
- 2022-03-24
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft forefront threat management gateway | = 2010 | No fix listed |
References
- 44857 broken-link third-party-advisory
- 48181 broken-link third-party-advisory vdb-entry
- 1025637 broken-link third-party-advisory vdb-entry
- MS11-040 patch vendor-advisory
- ms-tmg-firewall-bo(67736) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:12642 broken-link signature vdb-entry
- www.cisa.gov government-resource us-government-resource