Increased Threat for DNS Spoofing Vulnerability

Hi. Bill here. 


Today we released Microsoft Security Advisory (956187) to warn you of public exploit code available for Microsoft Security Bulletin MS08-037 (Vulnerabilities in DNS Could Allow Spoofing (953230).


We have investigated the public exploit code and have determined that customers who have installed Microsoft Security Bulletin MS08-037 are not affected.


As you may recall, MS08-037 was released in coordination with other DNS vendors across the industry that were also impacted by this vulnerability.


We have not seen any active attacks as of yet. However, we are monitoring the situation and are working with our MSRA partners to monitor and help protect customers. We will update the Advisory and blog as new information becomes available.




Bill Sisk 


 *This posting is provided “AS IS” with no warranties, and confers no rights.*