DNS Uninitialized Memory Corruption Vulnerability

CVE-2011-1970 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

The DNS server in Microsoft Windows Server 2003 SP2 and Windows Server 2008 SP2, R2, and R2 SP1 does not properly initialize memory, which allows remote attackers to cause a denial of service (service outage) via a query for a nonexistent domain, aka "DNS Uninitialized Memory Corruption Vulnerability."

Learn more about our Cis Benchmark Audit For Microsoft Windows Server.