Microsoft Windows Kernel CVE-2011-1971 Remote Denial of Service Vulnerability

Bugtraq ID:	48997
Class:	Design Error
CVE:	CVE-2011-1971
Remote:	Yes
Local:	No
Published:	Aug 09 2011 12:00AM
Updated:	Aug 18 2011 04:30PM
Credit:	Zheng Wenbin of Qihoo 360 Security Center
Vulnerable:	Microsoft Windows Vista x64 Edition SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 R2 x64 SP1 Microsoft Windows Server 2008 R2 x64 0 Microsoft Windows Server 2008 R2 Itanium SP1 Microsoft Windows Server 2008 R2 Itanium 0 Microsoft Windows Server 2008 for x64-based Systems SP2 Microsoft Windows Server 2008 for Itanium-based Systems SP2 Microsoft Windows Server 2008 for 32-bit Systems SP2 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows 7 for x64-based Systems 0 Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for 32-bit Systems 0 Avaya Aura Conferencing 6.0 Standard
Not Vulnerable:

Microsoft Windows Kernel CVE-2011-1971 Remote Denial of Service Vulnerability

Microsoft Windows is prone to a remote denial-of-service vulnerability.

A remote attacker can exploit this issue to crash the Windows kernel, denying service to legitimate users.

Microsoft Windows Kernel CVE-2011-1971 Remote Denial of Service Vulnerability

Attacker can exploit this issue by tricking an unsuspecting victim into viewing a file on a remote share.

Microsoft Windows Kernel CVE-2011-1971 Remote Denial of Service Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.


Microsoft Windows Server 2008 for 32-bit Systems SP2

• Microsoft Security Update for Windows Server 2008 (KB2556532)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 037

Microsoft Windows Server 2008 R2 x64 0

• Microsoft Security Update for Windows Server 2008 R2 x64 Edition (KB2556532)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 080

Microsoft Windows Vista x64 Edition SP2

• Microsoft Security Update for Windows Vista for x64-based Systems (KB2556532)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 045

Microsoft Windows Server 2008 R2 Itanium SP1

• Microsoft Security Update for Windows Server 2008 R2 for Itanium-based Systems (KB2556532)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 035

Microsoft Windows Vista SP2

• Microsoft Security Update for Windows Vista (KB2556532)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 043

Microsoft Windows 7 for x64-based Systems 0

• Microsoft Security Update for Windows 7 for x64-based Systems (KB2556532)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 102

Microsoft Windows 7 for 32-bit Systems SP1

• Microsoft Security Update for Windows 7 (KB2556532)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 033

Microsoft Windows 7 for 32-bit Systems 0

• Microsoft Security Update for Windows 7 (KB2556532)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 033

Microsoft Windows 7 for x64-based Systems SP1

• Microsoft Security Update for Windows 7 for x64-based Systems (KB2556532)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 102

Microsoft Windows Server 2008 R2 Itanium 0

• Microsoft Security Update for Windows Server 2008 R2 for Itanium-based Systems (KB2556532)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 035

Microsoft Windows Server 2008 for Itanium-based Systems SP2

• Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB2556532)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 057

Microsoft Windows Server 2008 R2 x64 SP1

• Microsoft Security Update for Windows Server 2008 R2 x64 Edition (KB2556532)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 080

Microsoft Windows Kernel CVE-2011-1971 Remote Denial of Service Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• Microsoft Security Bulletin MS11-068 - Moderate (Microsoft)