A vulnerability has been discovered in the Microsoft Domain Name System (DNS) Server service. This vulnerability is located in the code that parses responses to DNS queries.

The Windows DNS server parses an incoming DNS query, and in the way it parses a response to a forwarded DNS query. If triggered by a malicious DNS query, it triggers a heap-based buffer overflow, enabling the hacker to take control of the server.

An attacker can exploit vulnerable systems by crafting a specific response, in a particular format, to a legitimate request issued by a Microsoft DNS Server, which can cause a buffer overflow at the level of the Microsoft DNS Server service.