Microsoft Windows HTTP.sys Denial of Service Vulnerability

Last Update Date: 13 Apr 2016 12:04 Release Date: 13 Apr 2016 2932 Views

RISK: Medium Risk

TYPE: Operating Systems - Windows OS

A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2.0 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become unresponsive.