Product:
Forefront Threat Management Gateway
Summary
The NSPLookupServiceNext function in the client of Microsoft Forefront Threat Management Gateway 2010 allows remote attackers to execute arbitrary code through unspecified requests. This vulnerability is known as the TMG Firewall Client Memory Corruption Vulnerability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2011-1889 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted requests to the affected service, which may lead to memory corruption. Successful exploitation can allow the attacker to execute arbitrary code on the target system without requiring any authentication.
Affected Products
- Microsoft Forefront Threat Management Gateway 2010: A security gateway that provides protection against web-based threats.
Mitigation
To mitigate this vulnerability, users should apply the updates provided by Microsoft according to their instructions. Regularly updating software can help protect against known vulnerabilities.