KLA10941 Denial of service vulnerability in Microsoft Windows

An improper handling of authentication requests in the Local Security Authority Subsystem Service (LSASS) was found in Windows Vista Service Pack 2, Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1 and Windows 7 Service Pack 1. By exploiting this vulnerability malicious users can cause a denial of service. This vulnerability can be exploited remotely via a specially designed authentication request.

Original advisories

MS17-004

CVE-2017-0004

Related products

Microsoft-Windows-Vista-4

Microsoft-Windows-7

Microsoft-Windows-Server-2008

CVE list

CVE-2017-0004 critical

KB list

3216775

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Windows 7 Service Pack 1   Windows Vista Service Pack 2 Windows Server 2008 Service Pack 2 Windows Server 2008 R2 Service Pack 1