CVE-2011-1965: Microsoft Windows 7

High severity, CVSS 7.1. EPSS: 24.9% chance of exploitation in the next 30 days.

Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service (reboot) via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability."

Affected products

• Microsoft Windows 7: affected versions not specified
• Microsoft Windows Server 2008: version r2 only

Published 2011-08-10. Last modified 2026-06-16.