CVE-2011-2008

Published: Oct 12, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Access of Unallocated Memory DoS Vulnerability."

Affected (4)

Products: Microsoft: Host Integration Server

Microsoft

1 product

Host Integration Server

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Host Integration Server	Version 2004 sp1
Microsoft Host Integration Server	Version 2006 sp1
Microsoft Host Integration Server	Version 2009
Microsoft Host Integration Server	Version 2010

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-082

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12915

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-082

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12915

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.