Microsoft Windows Revoked Certificate Bypass Vulnerability

Last Update Date: 12 Dec 2012 14:51 Release Date: 12 Dec 2012 4574 Views

RISK: Medium Risk

TYPE: Operating Systems - Windows OS

A security feature bypass vulnerability exists in Windows due to the way the IP-HTTPS Component handles certificates. An attacker who successfully exploited this vulnerability could bypass certificate validation checks.

Impact

Security Restriction Bypass

System / Technologies affected

Windows Server 2008 R2
Windows Server 2012

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Download location for patches:
http://technet.microsoft.com/en-us/security/bulletin/ms12-083

Vulnerability Identifier

CVE-2012-2549

Source

Microsoft