Microsoft Windows TLS Protocol Vulnerability
RISK: High Risk
TYPE: Operating Systems - Windows OS
An information disclosure vulnerability exists in TLS encryption protocol. This vulnerability affects the protocol itself and is not specific to the Windows operating system. This is an information disclosure vulnerability that allows the decryption of encrypted TLS traffic. This vulnerability primarily impacts HTTPS traffic, since the browser is the primary attack vector, and all web traffic served via HTTPS or mixed content HTTP/HTTPS is affected.
Impact
- Information Disclosure
System / Technologies affected
- Microsoft Window XP
- Microsoft Window Vista
- Microsoft Window 7
- Microsoft Server 2003
- Microsoft Server 2008
- Microsoft Server 2008 R2
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Download location for patches:
http://technet.microsoft.com/en-us/security/bulletin/MS12-049
Vulnerability Identifier
Source
Related Link
Share with