← back | CVE Intelligence

CVE-2017-11779

Curated 2 security research writeups, vulnerability advisories and exploitation analyses for CVE-2017-11779.

Coverage Span: 2017-10-10
Reports: 2 related reports

Associated Reports & Timeline

Windows DNS Client – Memory Corruption Vulnerabilities

Advisory for CVE-2017-11779: insufficient NSEC3 validation causes high-risk memory corruption in the Windows DNS client, giving attackers code execution and full admin control; patched October 2017.

A Bug Has No Name: Multiple Heap Buffer Overflows In the Windows DNS Client

Dissecting CVE-2017-11779: unsafe NSEC3 record parsing in Windows DNSAPI.dll causes multiple heap overflows, and an attacker-controlled DNS server can trigger arbitrary code execution.