Microsoft · Windows Server 2012 R2 · CVE-2017-11779
**Name of the Vulnerable Software and Affected Versions**
Microsoft Windows versions 8.1, 10 (Gold, 1511, 1607, 1703), Windows Server 2012 R2, Windows Server 2016, and Windows RT 8.1
**Description**
The issue is related to a remote code execution vulnerability in the Microsoft Windows Domain Name System (DNS) DNSAPI.dll. It occurs when the system fails to properly handle DNS responses. This can be exploited by a remote attacker using specially crafted DNS responses, potentially allowing them to execute arbitrary code or cause a denial of service. The estimated number of potentially affected devices and details about real-world incidents are not provided.
**Recommendations**
For Microsoft Windows versions 8.1, 10 (Gold, 1511, 1607, 1703), Windows Server 2012 R2, Windows Server 2016, and Windows RT 8.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.