Title

Microsoft Windows DNS Remote Code Execution Vulnerability (MS15-127) (Cat I impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability in Microsoft Windows DNS. To exploit this vulnerability, an attacker would create a specially crafted application to connect to a Windows DNS server and then issue malicious requests to the server. If successfully exploited, an attacker would execute arbitrary code in the context of the Local System Account.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-64745

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.