---
id: 4233
title: "[CVE-2017-11779] A Bug Has No Name: Multiple Heap Buffer Overflows In the Windows DNS Client"
cve: CVE-2017-11779
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/heap-buffer-overflows-in-windows-dns-client"
published_at: "2017-10-10T00:00:00Z"
tags: ["windows", "memory-corruption", "vulnerability", "dns", "heap-overflow", "cve-2017-11779"]
phying_url: "https://phying.com/item/4233"
lang: en
---

# [CVE-2017-11779] A Bug Has No Name: Multiple Heap Buffer Overflows In the Windows DNS Client

## Summary

Dissecting CVE-2017-11779: unsafe NSEC3 record parsing in Windows DNSAPI.dll causes multiple heap overflows, and an attacker-controlled DNS server can trigger arbitrary code execution.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2017-11779
- **Published:** 2017-10-10T00:00:00Z
- **Original:** https://bishopfox.com/blog/heap-buffer-overflows-in-windows-dns-client
- **Phying News:** https://phying.com/item/4233