Title

Microsoft Windows DNS Server Remote Code Execution Vulnerability (MS16-071) (Cat I impact)

Discussion

Microsoft has addressed a vulnerability in the Windows DNS server. The Domain Name System (DNS) is a standard technology for managing the names of Web sites and other Internet domains. To exploit this vulnerability, an attacker would send a specially crafted requests to a DNS server. If successfully exploited, this vulnerability would allow an attacker to execute remote code and compromise affected systems.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-69099

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.