Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2011-0657: Windows DNS client can run malicious code
CVE-2011-0657 · published 15 years ago
Summary
The DNS component in several Windows versions (XP, Server 2003, Vista, Server 2008, and Windows 7) can be tricked by specially crafted network queries or applications into running unwanted code. This could let an attacker take control of the affected computer. Install the latest security updates from Microsoft or upgrade to a newer, supported version of Windows to protect your systems.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | windows_2003_server |
All versions
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:* |
| microsoft | windows_7 |
All versions
cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:* |
| microsoft | windows_server_2003 |
All versions
cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:* |
| microsoft | windows_server_2008 |
r2 cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:* |
| microsoft | windows_vista |
All versions
cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:* |
| microsoft | windows_xp |
All versions
cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:* |
Original advisory text
DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does ...
DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process DNS queries, which allows remote attackers to execute arbitrary code via (1) a crafted LLMNR broadcast query or (2) a crafted application, aka "DNS Query Vulnerability."
References
- http://osvdb.org/71780
- http://secunia.com/advisories/44161
- http://www.securityfocus.com/bid/47242
- http://www.securitytracker.com/id?1025332
- http://www.us-cert.gov/cas/techalerts/TA11-102A.html US Government Resource
- http://www.vupen.com/english/advisories/2011/0948
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-03...
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3...
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Type
CWE-20Improper Input Validation
Timeline
Published13 Apr 2011
Updated30 Sep 2026
First seen29 Sep 2026
Sources
CVE-2011-0657 · NVD
Track software like this
Free during beta