Microsoft Forefront Threat Management Gateway (TMG) Firewall Client Memory Corruption Vulnerability

Bugtraq ID:	48181
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2011-1889
Remote:	Yes
Local:	No
Published:	Jun 14 2011 12:00AM
Updated:	Jun 14 2011 12:00AM
Credit:	The vendor
Vulnerable:	Microsoft Forefront Threat Management Gateway 2010 Client 0
Not Vulnerable:	Microsoft Forefront Threat Management Gateway 2010 SP1 Microsoft Forefront Threat Management Gateway 2010 0 Microsoft Forefront Threat Management Gateway Medium Business Edit

Microsoft Forefront Threat Management Gateway (TMG) Firewall Client Memory Corruption Vulnerability

Microsoft Forefront Threat Management Gateway (TMG) Firewall client is prone to a memory-corruption vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed attacks may cause a denial-of-service condition.

Microsoft Forefront Threat Management Gateway (TMG) Firewall Client Memory Corruption Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Forefront Threat Management Gateway (TMG) Firewall Client Memory Corruption Vulnerability

Solution:
Vendor updates are available. Please see the references for details.


Microsoft Forefront Threat Management Gateway 2010 Client 0

• Microsoft Security Update for Forefront Threat Management Gateway (TMG) Client (KB 2520426)
  http://www.microsoft.com/downloads/en/details.aspx?FamilyID=d1c85acd-a 6df-4634-9cd4-c562ad92097e&displaylang=en

Microsoft Forefront Threat Management Gateway (TMG) Firewall Client Memory Corruption Vulnerability

References:

• Forefront Threat Management Gateway Homepage (Microsoft)
  
• Microsoft Security Bulletin MS11-040 - Critical (Microsoft)