Title

Microsoft Windows Digital Signature Denial of Service Vulnerability (Cat I impact)

Discussion

Microsoft has addressed a denial of service vulnerability affecting the X.509 certificate validation operation in various Microsoft products. To exploit this vulnerability, an attacker would send a specially crafted certificate to a web service on an affected system. If successfully exploited, this vulnerability would allow an attacker to cause a denial of service condition on affected systems.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-42304

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.