CVE-2014-0261 — MEDIUM (4.0)

Vulnerability Description

Microsoft Dynamics AX 4.0 SP2, 2009 SP1, 2012, and 2012 R2 allows remote authenticated users to cause a denial of service (instance outage) via crafted data to an Application Object Server (AOS) instance, aka "Query Filter DoS Vulnerability."

CVSS Score

4.0

MEDIUM

AV:N/AC:L/Au:S/C:N/I:N/A:P

Confidentiality

NONE

Integrity

NONE

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Microsoft	Dynamics Ax	4.0

Related Weaknesses (CWE)

CWE-20

References

http://www.securitytracker.com/id/1029601Third Party AdvisoryVDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-00
http://www.securitytracker.com/id/1029601Third Party AdvisoryVDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-00

FAQ

What is CVE-2014-0261?

CVE-2014-0261 is a vulnerability with a CVSS score of 4.0 (MEDIUM). Microsoft Dynamics AX 4.0 SP2, 2009 SP1, 2012, and 2012 R2 allows remote authenticated users to cause a denial of service (instance outage) via crafted data to an Application Object Server (AOS) insta...

How severe is CVE-2014-0261?

CVE-2014-0261 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-0261?

Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Dynamics Ax.