← All CVEs

CVE-2011-1268

high · 10

The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Response Parsing Vulnerability."

10
CVSS
10.8%
EPSS (exploit prob.)
96th
EPSS percentile
2011-06-16
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
microsoftwindows_2003_serverall versions
microsoftwindows_7all versions
microsoftwindows_7all versions
microsoftwindows_7all versions
microsoftwindows_server_2003all versions
microsoftwindows_server_2008all versions
microsoftwindows_server_2008all versions
microsoftwindows_server_2008all versions
microsoftwindows_server_2008all versions
microsoftwindows_server_2008all versions
microsoftwindows_server_2008all versions
microsoftwindows_server_2008r2
microsoftwindows_server_2008r2
microsoftwindows_vistaall versions
microsoftwindows_vistaall versions
microsoftwindows_xpall versions
microsoftwindows_xpall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-1268