CWE Code: 131
Vulnerability Type: privilege_escalation
CVSS Score: 9.3
CWE Name:  Incorrect Calculation of Buffer Size
Summary: an elevation of privilege vulnerability exists in windows when ldap request buffer lengths are improperly calculated. in a remote attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to send malicious traffic to a domain controller, aka "ldap elevation of privilege vulnerability."
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-04-12
Last Modified Date: 2019-10-03