CVE-2016-0037 in Windows

Sumário

de MITRE

The forms-based authentication implementation in Active Directory Federation Services (ADFS) 3.0 in Microsoft Windows Server 2012 R2 allows remote attackers to cause a denial of service (daemon outage) via crafted data, aka "Microsoft Active Directory Federation Services Denial of Service Vulnerability."

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 03/12/2015
• Divulgação: 10/02/2016
• Moderação: aceite
• Entrada: VDB-80878
• CPE: pronto
• CWE: CWE-20 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.38155
• KEV: não
• Atividades: muito baixo
• Sector: Lawfirm, Chemical, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-0037
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-0037
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-0037/