CVE-2016-3227

Published: Jun 16, 2016Modified: May 6, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Use-after-free vulnerability in the DNS Server component in Microsoft Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests, aka "Windows DNS Server Use After Free Vulnerability."

Affected (4)

Products: Microsoft: Windows Server 2012

Microsoft

1 product

Windows Server 2012

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows Server 2012	All versions
Microsoft Windows Server 2012	Version r2
Microsoft Windows Server 2012	Version r2
Microsoft Windows Server 2012	Version r2

References (4)

http://www.securitytracker.com/id/1036095

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-071

Source: secure@microsoft.com

http://www.securitytracker.com/id/1036095

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-071

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.