Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2017-11779] Windows DNS Client – Memory Corruption Vulnerabilities

bishopfox.com | vulnerability | CVE-2017-11779 | #microsoft | #windows | #memory-corruption | #advisory | #dns | #cve-2017-11779

Summary

Advisory for CVE-2017-11779: insufficient NSEC3 validation causes high-risk memory corruption in the Windows DNS client, giving attackers code execution and full admin control; patched October 2017.
Published
Collected

original ↗

Related coverage

  1. A Bug Has No Name: Multiple Heap Buffer Overflows In the Windows DNS Client (bishopfox.com)
  2. August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEs (crowdstrike.com)
  3. From Emoji to Zero-Day: Latin Homoglyphs in Domains and Subdomains (bishopfox.com)
  4. Python Software Foundation - Python 3.11.0a3 to 3.15.0b2 (bishopfox.com)
  5. OOB to RCE: Exploitation of the Hobbes Functional Interpreter (bishopfox.com)
  6. Dradis Pro Version 3.4.1 (bishopfox.com)

back