PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2017-11779] A Bug Has No Name: Multiple Heap Buffer Overflows In the Windows DNS Client

bishopfox.com | vulnerability | CVE-2017-11779 | #windows | #memory-corruption | #vulnerability | #dns | #heap-overflow | #cve-2017-11779
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Dissecting CVE-2017-11779: unsafe NSEC3 record parsing in Windows DNSAPI.dll causes multiple heap overflows, and an attacker-controlled DNS server can trigger arbitrary code execution.
CVE
CVE-2017-11779
Published
Collected

Related coverage

vulnerability · bishopfox.com
Windows DNS Client – Memory Corruption Vulnerabilities
Advisory for CVE-2017-11779: insufficient NSEC3 validation causes high-risk memory corruption in the Windows DNS client, giving attackers code execution and full admin control; patched October 2017.
Critical · vulnerability · github.com
php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP
These surviving flaws bypass earlier patches and demonstrate that core PHP deserialization and memory management remain fundamentally fragile, posing critical unauthenticated RCE risks to WordPress and production PHP services.
vulnerability · bugpwn.com
open62541: Integer Overflow → Heap Overflow → RCE.
Original research: how a 16 bit size field overflow in open62541's custom DataType machinery lets a malicious OPC UA server corrupt a connecting client's heap, up to remote code execution. CVE-2026-116014, CVSS 9.2. Root cause, networked PoC, and the official fix. By BUG|PWN.
Critical · vulnerability · github.com
Heap buffer overflow in scale_nearest_neighbor() via duplicate Alpha planes from nested iden/auxl items
A critical, network-reachable image-decoding flaw can turn an attacker-supplied HEIC/HEIF/AVIF file into code execution; upgrade libheif to v1.23.2.
research · depthfirst.com
NGINX Rift: Achieving NGINX Remote Code Execution via an 18-Year-Old Vulnerability
depthfirst's system found four remote memory-corruption bugs in NGINX, including a 2008-era heap overflow (CVE-2026-42945); a PoC shows RCE with ASLR off. rewrite/set users are at risk.
research · osec.io
Pwning Minecraft: 4-byte heap overflow to RCE
OtterSec achieves RCE in Minecraft Bedrock, turning a 4-byte heap overflow from a malicious server into full client compromise on Windows, bypassing ASLR and Control Flow Guard.
Back