CVE-2015-6125

high · 9.3

Use-after-free vulnerability in the DNS server in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests, aka "Windows DNS Use After Free Vulnerability."

9.3

CVSS

29.6%

EPSS (exploit prob.)

98th

EPSS percentile

2015-12-09

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
microsoft	windows_server_2008	all versions
microsoft	windows_server_2008	r2
microsoft	windows_server_2012	all versions
microsoft	windows_server_2012	r2
microsoft	windows_server_2012	r2
microsoft	windows_server_2012	r2

Check a specific version with /api/v1/cve/match.

References

http://www.securitytracker.com/id/1034323
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-127
http://www.securitytracker.com/id/1034323
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-127

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-6125