PT-2017-1599 · Microsoft · Windows Server+2

Martin Knafve · Published 2017-03-14 · Updated 2017-07-12 · CVE-2017-0057

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1, 10 Gold, 10 1511, 10 1607, and Windows Server versions 2012 R2, 2016 Windows RT 8.1

Description The issue is related to the DNS client in Microsoft Windows, which fails to properly process DNS queries. This allows remote attackers to obtain sensitive information by either convincing a workstation user to visit an untrusted webpage or tricking a server into sending a DNS query to a malicious DNS server. The vulnerability is associated with a lack of protection for service data.

Recommendations For Microsoft Windows 8.1, update to a version that includes the fix for this issue. For Windows 10 Gold, 1511, and 1607, update to a version that includes the fix for this issue. For Windows Server 2012 R2 and 2016, update to a version that includes the fix for this issue. For Windows RT 8.1, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to untrusted web pages and limiting DNS queries to trusted servers until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2017-00744

CVE-2017-0057

Affected Products

Windows

Windows Rt

Windows Server

References · 8

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0057 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-0057 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0057 · Security Note
• https://osv.dev/vulnerability/CVE-2017-0057 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-0057 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-00744 · Security Note
• http://securityfocus.com/bid/96695 · Note
• http://securitytracker.com/id/1038001 · Note