CVE-2015-6125: Use After Free
Published Dec 9, 2015
·Updated
Use-after-free vulnerability in the DNS server in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests, aka "Windows DNS Use After Free Vulnerability."
Affected Software
6 affected components
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2012=gold
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2012=r2
Event History
Dec 9, 2015
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-6125?
The severity of CVE-2015-6125 is critical due to its potential for remote code execution.
2
How do I fix CVE-2015-6125?
To fix CVE-2015-6125, you should apply the security updates released by Microsoft as detailed in their advisory.
3
Which versions of Windows are affected by CVE-2015-6125?
CVE-2015-6125 affects Microsoft Windows Server 2008 SP2, Windows Server 2008 R2 SP1, and Windows Server 2012.
4
What type of vulnerability is CVE-2015-6125?
CVE-2015-6125 is classified as a use-after-free vulnerability impacting the DNS server functionality.
5
Can CVE-2015-6125 be exploited remotely?
Yes, CVE-2015-6125 can be exploited remotely by attackers through crafted DNS requests.