Unrated severityNVD Advisory· Published Aug 10, 2011· Updated Apr 29, 2026

CVE-2011-1966

Description

The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."

Affected products

Microsoft/Windows Server 20083 versions
cpe:2.3:o:microsoft:windows_server_2008:r2:*:x64:*:*:*:*:*+ 2 more
- cpe:2.3:o:microsoft:windows_server_2008:r2:*:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.us-cert.gov/cas/techalerts/TA11-221A.htmlnvdUS Government Resource
docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-058nvd
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12764nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.046
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000