VULNERABILITY INTELLIGENCE

CVE-2011-1966

CVSS score10 HIGH
EPSS probability55.20%
CISA KEVNot currently listed
Published2011-08-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."

Weakness classification

  • CWE-20: Improper Input Validation

Primary references