Check Point Advisories

Microsoft DNS Server Denial of Service (MS12-017; CVE-2012-0006)

Check Point Reference:	CPAI-2012-087
Date Published:	12 Mar 2012
Severity:	High
Last Updated:	Sunday 01 January, 2012
Source:	CVE-2012-0006
Protection Provided by:
Who is Vulnerable?	Windows Server 2003 Service Pack 2 Windows Server 2003 x64 Edition Service Pack 2 Windows Server 2003 with SP2 for Itanium-based Systems Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 R2 for x64-based Systems Windows Server 2008 R2 for x64-based Systems Service Pack 1
Vulnerability Description	A denial of service vulnerability has been reported in Microsoft DNS servers.
Update/Patch Avaliable	Apply patches from: MS12-017
Vulnerability Details	The vulnerability is due to the way that the DNS server improperly handles objects in memory when looking up the resource record of a domain. A remote attacker may exploit this issue by sending a specially crafted DNS query to a DNS server. Successful exploitation may cause the server to crash, resulting in a denial of service condition.