CVE-2016-0044 — Improper Input Validation in Microsoft Windows Server 2012

CWE-20 — Improper Input Validation4 documents3 sources
Severity
7.5HIGHNVD
EPSS
31.7%
top 3.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Windows Server 2012
Timeline
PublishedFeb 10
Latest updateMay 14

Description

Sync Framework in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows remote attackers to cause a denial of service (SyncShareSvc service outage) via crafted "change batch" data, aka "Windows DLL Loading Denial of Service Vulnerability."

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

Patches

Patch: docs.microsoft.com ↗Patch: docs.microsoft.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-jwpw-2pjx-j868: Sync Framework in Microsoft Windows 8↗2022-05-14
▶

🕵️Threat Intelligence

2
Talos
Microsoft Patch Tuesday - February 2016↗2016-02-09
▶
Talos
Microsoft Patch Tuesday - February 2016↗2016-02-09
▶