CVE-2017-11779

The Microsoft Windows Domain Name System (DNS) DNSAPI.dll on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code Execution Vulnerability".

Score

CVSS 3.0 8.1 High

Status

Modified - secure@microsoft.com

Published

2017-10-13

Last modified

2024-09-17

Affected products

• Windows 10 (Microsoft)
• Windows 8.1 (Microsoft)
• Windows Rt 8.1 (Microsoft)
• Windows Server 2012 (Microsoft)
• Windows Server 2016 (Microsoft)
• Windows Domain Name System Dns (Microsoft Corporation)

References

• http://www.securityfocus.com/bid/101166
• http://www.securitytracker.com/id/1039533
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11779