Denial of service vulnerability in Microsoft Acrtive Directory Federation Services

Description

Lack of input data checks was found in Microsoft Active Directory Federation Services. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed input to form-based authentication.

Original advisories

• CVE-2016-0037

Related products

• Microsoft-Active-Directory

CVE list

• CVE-2016-0037
  warning

KB list

• 3134222

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com