CVE-2011-1889

microsoft forefront threat management gateway

Published 16 Jun 2011 · updated 16 Jun 2026 · Analyzed

9.8 Critical · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 3 Mar 2022, with a remediation deadline of 24 Mar 2022 for US federal agencies.

Required action: Apply updates per vendor instructions.

Description

The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability."

References

secunia.com/advisories/44857 · Broken Link
www.securityfocus.com/bid/48181 · Broken Link, Third Party Advisory, VDB Entry
www.securitytracker.com/id?1025637 · Broken Link, Third Party Advisory, VDB Entry
docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-040 · Patch, Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/67736 · Third Party Advisory, VDB Entry
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12642 · Broken Link
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-1889 · US Government Resource