CVE-2011-2013

Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by sending a sequence of crafted UDP packets to a closed port, aka "Reference Counter Overflow Vulnerability."

Affected products

Windows, Windows 7, Windows Server 2008, Windows Vista

Microsoft Windows 7

All versions

Microsoft Windows Server 2008

All versions

Microsoft Windows Vista

All versions

CVSS 2.0

10.0 HIGH

CVSS 3.1

9.8 CRITICAL

EPSS

33.7% (98th percentile)

Weakness

CWE-190, CWE-189

NVD status

Modified

Published

2011-11-08