CVE-2011-1265

HIGH 8.8CVE-2011-1265 · Published 13/07/2011 · updated 16/06/2026

In short

CVE-2011-1265 is a HIGH (CVSS 8.8) vulnerability affecting bluetooth stack (bluetooth).
Chance of exploitation in the next 30 days (EPSS): 5.9%, higher than 93.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
bluetooth stack bluetooth	`= 2.1`	No fix yet

Description

The Bluetooth Stack 2.1 in Microsoft Windows Vista SP1 and SP2 and Windows 7 Gold and SP1 does not prevent access to objects in memory that (1) were not properly initialized or (2) have been deleted, which allows remote attackers to execute arbitrary code via crafted Bluetooth packets, aka "Bluetooth Stack Vulnerability."

References

us-cert.gov/cas/techalerts/TA11-193A.html · Third Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-053 · Patch
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12094 · Tool Signature

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free