CVE-2019-0736

Description

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine. To exploit the vulnerability, an attacker could send specially crafted DHCP responses to a client. The security update addresses the vulnerability by correcting how Windows DHCP clients handle certain DHCP responses.

Weakness classification

• CWE-787: Out-of-bounds Write

Primary references

• secure@microsoft.com — Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory