CVE-2014-0261

Published: Jan 15, 2014Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

Microsoft Dynamics AX 4.0 SP2, 2009 SP1, 2012, and 2012 R2 allows remote authenticated users to cause a denial of service (instance outage) via crafted data to an Application Object Server (AOS) instance, aka "Query Filter DoS Vulnerability."

Affected (4)

Products: Microsoft: Dynamics Ax

Microsoft

1 product

Dynamics Ax

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Dynamics Ax	Version 2009 sp1
Microsoft Dynamics Ax	Version 2012
Microsoft Dynamics Ax	Version 2012 r2
Microsoft Dynamics Ax	Version 4.0 sp2

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://www.securitytracker.com/id/1029601

Source: secure@microsoft.com

Third Party AdvisoryVDB Entry

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-004

Source: secure@microsoft.com

http://www.securitytracker.com/id/1029601

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-004

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.