{"uuid": "d8cb8620-56b1-4adc-9cd0-40b8e2f79f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0657", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/llmnr/ms11_030_dnsapi.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"jduck \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a buffer underrun vulnerability in Microsoft's DNSAPI.dll\\n        as distributed with Windows Vista and later without KB2509553. By sending a\\n        specially crafted LLMNR query, containing a leading '.' character, an attacker\\n        can trigger stack exhaustion or potentially cause stack memory corruption.\\n\\n        Although this vulnerability may lead to code execution, it has not been proven\\n        to be possible at the time of this writing.\\n\\n        NOTE: In some circumstances, a '.' may be found before the top of the stack is\\n        reached. In these cases, this module may not be able to cause a crash.\", \"disclosure_date\": \"2011-04-12\", \"fullname\": \"auxiliary/dos/windows/llmnr/ms11_030_dnsapi\", \"is_install_path\": true, \"mod_time\": \"2026-06-17 11:11:50 +0000\", \"name\": \"Microsoft Windows DNSAPI.dll LLMNR Buffer Underrun DoS\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [], \"Stability\": [\"crash-service-down\"]}, \"path\": \"/modules/auxiliary/dos/windows/llmnr/ms11_030_dnsapi.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"dos/windows/llmnr/ms11_030_dnsapi\", \"references\": [\"CVE-2011-0657\", \"OSVDB-71780\", \"MSB-MS11-030\"], \"rport\": 5355, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:08.918419Z"}