Home / bulletins

MS15-031 - Important: Vulnerability in Schannel Could Allow Security Feature Bypass (3046049) - Version: 1.0

Posted on 10 March 2015

There is an newer version: MS15-031 - Version: 1.1

Important

Severity Rating: Important
Revision Note: V1.0 (March 10, 2015): Bulletin published.
Summary: This security update resolves a vulnerability in Microsoft Windows that facilitates exploitation of the publicly disclosed FREAK technique, an industry-wide issue that is not specific to Windows operating systems. The vulnerability could allow a man-in-the-middle (MiTM) attacker to force the downgrading of the key length of an RSA key to EXPORT-grade length in a TLS connection. Any Windows system using Schannel to connect to a remote TLS server with an exploitable cipher suite is affected.

Link

Other versions

• MS15-031 - Version: 1.0
• MS15-031 - Version: 1.1

 

TOP