CVE-2011-2003 CVE-2011-2003

漏洞描述

Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon file, aka "Font Library File Buffer Overrun Vulnerability."

影响产品

微软公司Windows-Server-2003查看产品 →微软公司Windows-Server-2008查看产品 →微软公司Windows-Vista查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13103↗securityreason.comhttp://securityreason.com/securityalert/8473↗www.securitytracker.comhttp://www.securitytracker.com/id?1026165↗docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-077↗

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
remote_registry_access_check Remote Registry Service Disabled Check Microsoft-Windows-Business-Server Windows Server Windows+14	中危	—	—	PoCEXP	2025/08/01
hard_disk_default_share Hard Disk Default Share Removal Check Microsoft-Windows-Business-Server IIS Windows Server+8	中危	—	—	PoCEXP	2025/08/01
CVE-2020-13699RCE CVE-2020-13699 Windows Server Windows Windows7+10	高危	8.8	74.6%	PoCEXP	2020/07/29
CVE-2018-3991RCE CVE-2018-3991 Windows Server Windows Windows7+10	严重	9.8	71.1%	PoCEXP	2019/02/05
CVE-2018-4990RCE CVE-2018-4990 Microsoft-Windows-Business-Server Windows Server Windows+14	高危	8.8	60.1%	PoCEXP	2018/07/09
CVE-2018-4878RCE CVE-2018-4878 Windows Server Windows Windows7+9	严重	9.8	93.3%	PoCEXP	2018/02/06

利用情报状态

漏洞描述

影响产品

修复建议

参考链接

同产品关联漏洞