CVE-2014-6321 2

Vulnerability (CVE)

Microsoft Update Tuesday November 2014: Fixes for 3 0-day Vulnerabilities

Microsoft released 14 security bulletins covering 33 CVEs, after postponing two announced bulletins (MS14-068 and MS14-075) due to issues that emerged in late testing. Four bulletins are critical, covering 21 CVEs that can result in remote code execution,...

Zero-Days & Exploits

DTLS Vulnerabilities in CVE-2014-6321

Cyber Risks Unit 42 Palo Alto Networks

Microsoft's MS14-066 patch for CVE-2014-6321 fixed at least two DTLS vulnerabilities in schannel.dll, which Windows Remote Desktop Gateway uses to secure client-server connections. On the server side, DTLSCookieManager::ValidateCookie always reads a...

Vulnerabilities & Patching