CVE-2011-2003

Microsoft Windows - Buffer Overflow

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2011-2003. PoCs published by Byoungyoung Lee.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Windows kernel-mode drivers (CVE-2011-2003) via a malformed .fon file. It achieves local privilege escalation by exploiting the vulnerability in the win32k.sys driver on Windows 7 32-bit systems.

Description

Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon file, aka "Font Library File Buffer Overrun Vulnerability."

Exploits (1)

exploitdb WORKING POC VERIFIED

by Byoungyoung Lee · textdoswindows

https://www.exploit-db.com/exploits/17978

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in Windows kernel-mode drivers (CVE-2011-2003) via a malformed .fon file. It achieves local privilege escalation by exploiting the vulnerability in the win32k.sys driver on Windows 7 32-bit systems.

Classification

Working Poc 90%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: Microsoft Windows 7 32-bit (fully patched until Sep. 2011)

No auth needed

Prerequisites: Access to the target system to execute the malformed .fon file

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4

Core References

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-077

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13103

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1026165

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/8473

Scores

EPSS 0.2777

EPSS Percentile 97.8%

Details

CWE

CWE-119

Status published

Products (7)

microsoft/windows_2003_server

microsoft/windows_7 (3 CPE variants)

microsoft/windows_server_2003

microsoft/windows_server_2008 (3 CPE variants)

microsoft/windows_server_2008 r2 (2 CPE variants)

microsoft/windows_vista

microsoft/windows_xp (2 CPE variants)

Published Oct 12, 2011

Tracked Since Feb 18, 2026