Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2017-11779] A Bug Has No Name: Multiple Heap Buffer Overflows In the Windows DNS Client

Summary

Dissecting CVE-2017-11779: unsafe NSEC3 record parsing in Windows DNSAPI.dll causes multiple heap overflows, and an attacker-controlled DNS server can trigger arbitrary code execution.
Published
Collected

original ↗

Related coverage

back