PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2017-11779] Windows DNS Client – Memory Corruption Vulnerabilities

bishopfox.com | vulnerability | CVE-2017-11779 | #microsoft | #windows | #memory-corruption | #advisory | #dns | #cve-2017-11779
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Advisory for CVE-2017-11779: insufficient NSEC3 validation causes high-risk memory corruption in the Windows DNS client, giving attackers code execution and full admin control; patched October 2017.
CVE
CVE-2017-11779
Published
Collected

Related coverage

vulnerability · bishopfox.com
A Bug Has No Name: Multiple Heap Buffer Overflows In the Windows DNS Client
Dissecting CVE-2017-11779: unsafe NSEC3 record parsing in Windows DNSAPI.dll causes multiple heap overflows, and an attacker-controlled DNS server can trigger arbitrary code execution.
tool · github.com
LogonStealer: Windows Credential Provider DLL for Stealing Plaintext Passwords via CredProvDataModel Hooks
Demonstrates an effective post-exploitation technique targeting the modern Windows 11 WinRT logon architecture to harvest plaintext credentials while bypassing PPL.
vulnerability · bishopfox.com
OOB to RCE: Exploitation of the Hobbes Functional Interpreter
Jake Miller details CVE-2020-13656 in Morgan Stanley's Hobbes interpreter: missing array bounds checking yields an out-of-bounds read/write primitive leading to local and remote code execution.
vulnerability · bishopfox.com
Oracle WebLogic Node Manager allows arbitrary configuration via UNC path
Bishop Fox advisory: WebLogic Node Manager 10.3.3 and earlier let unauthenticated attackers redirect its config and password files to an attacker-controlled UNC path, then run commands; fixed in 2011.
Critical · vulnerability · github.com
php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP
These surviving flaws bypass earlier patches and demonstrate that core PHP deserialization and memory management remain fundamentally fragile, posing critical unauthenticated RCE risks to WordPress and production PHP services.
High · vulnerability · github.com
GOG Galaxy Local Privilege Escalation (LPE) PoC via DLL Search-Order Hijacking
Demonstrates persistent DLL hijacking vulnerabilities in popular gaming clients, showing how insecure service configurations and missing safe DLL search controls allow standard users to breach SYSTEM privilege boundaries.
Back