Description
Microsoft Windows Bluetooth Stack是蓝牙协议栈的实现。 Microsoft Windows Bluetooth Stack 2.1版本不能阻止访问未正确初始化或已被删除内存中的对象。远程攻击者可通过发送特制的蓝牙报文到受影响系统导致远程代码执行，此漏洞仅影响带有蓝牙功能的系统。
Microsoft Windows Bluetooth Stack对象处理远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cve.imfht.com/detail/CVE-2011-1265
http://cve.scap.org.cn/vulnerability/VHN-48179
https://www.h3c.com/cn/d_200806/608469_30003_0.htm
https://www.tenablecloud.cn/plugins/nessus/55569
https://www.nsfocus.net/vulndb/17198
https://support.microsoft.com/zh-cn/topic/ms11-053-bluetooth-%E5%A0%86%E6%A0%88%E4%B8%AD%E7%9A%84%E6%BC%8F%E6%B4%9E%E5%8F%AF%E8%83%BD%E5%85%81%E8%AE%B8%E8%BF%9C%E7%A8%8B%E6%89%A7%E8%A1%8C%E4%BB%A3%E7%A0%81-2011-%E5%B9%B4-7-%E6%9C%88-12-%E6%97%A5-eef05d23-153e-2ffe-80be-1eb2d7c0e6be
https://www.cnvd.org.cn/patchInfo/show/415381
https://www.hkcert.org/tc/security-bulletin/microsoft-windows-bluetooth-stack-vulnerability
https://learn.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-053
https://www.microsoft.com/en-us/msrc/blog/2011/07/ms11-053-vulnerability-in-the-bluetooth-stack-could-allow-remote-code-execution
https://nvd.nist.gov/vuln/detail/cve-2023-35634
https://thehackernews.com/2011/07/microsoft-vulnerability-in-bluetooth.html
https://ynwarcs.github.io/x-cve-2023-24871-rce
https://cybersecuritynews.com/windows-bluetooth-rce-vulnerability/