MS11-053: Vulnerability in Bluetooth Stack Could Allow Remote Code Execution (2566220)

Medium Nessus Plugin ID 55569


Arbitrary code can be executed on the remote host through Bluetooth.


The remote host contains a version of the Windows Bluetooth stack that is affected by a code execution vulnerability. By sending a series of specially crafted Bluetooth packets to an affected system, an attacker could install programs; view, change, or delete data; or create new accounts with full user rights. Note that this vulnerability only affects systems with Bluetooth capability.


Microsoft has released a set of patches for Windows Vista and 7.

See Also

Plugin Details

Severity: Medium

ID: 55569

File Name: smb_nt_ms11-053.nasl

Version: $Revision: 1.17 $

Type: local

Agent: windows

Published: 2011/07/12

Modified: 2017/07/26

Dependencies: 13855, 57033

Risk Information

Risk Factor: Medium


Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:A/AC:H/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2011/07/12

Vulnerability Publication Date: 2011/07/12

Reference Information

CVE: CVE-2011-1265

BID: 48617

OSVDB: 73799

MSFT: MS11-053

IAVA: 2011-A-0100

MSKB: 2532531, 2561109