CVE-2012-1194: Microsoft Windows Server 2008

Medium severity, CVSS 6.4. EPSS: 9.7% chance of exploitation in the next 30 days.

The resolver in the DNS Server service in Microsoft Windows Server 2008 before R2 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.

Affected products

• Microsoft Windows Server 2008: up to and including -; affected versions not specified

Published 2012-02-17. Last modified 2026-06-16.