CVE-2011-1248

Windows Server 2003 SP2 and Server 2008 - Remote Code Execution via Crafted Packets

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2011-1248. PoCs published by Luigi Auriemma.

AI-analyzed exploit summary This is a detailed writeup by Luigi Auriemma explaining the arbitrary memory corruption vulnerability (CVE-2011-1248) in Microsoft WINS service. It includes disassembly analysis and exploitation details but does not contain executable exploit code.

Description

WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted packets, related to unintended stack-frame values and buffer passing, aka "WINS Service Failed Response Vulnerability."

Exploits (1)

exploitdb WRITEUP
by Luigi Auriemma · textdoswindows
https://www.exploit-db.com/exploits/17830

This is a detailed writeup by Luigi Auriemma explaining the arbitrary memory corruption vulnerability (CVE-2011-1248) in Microsoft WINS service. It includes disassembly analysis and exploitation details but does not contain executable exploit code.

Classification
Writeup 100%
Attack Type
Dos
Complexity
Complex
Reliability
Theoretical
Target: Microsoft WINS service <= 5.2.3790.4520
No auth needed
Prerequisites: Network access to the WINS service (port 42)
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12724

Scores

EPSS 0.4757
EPSS Percentile 98.7%

Details

CWE
CWE-20
Status published
Products (3)
microsoft/windows_server_2003
microsoft/windows_server_2008 (4 CPE variants)
microsoft/windows_server_2008 r2
Published May 13, 2011
Tracked Since Feb 18, 2026