MS14-016: Vulnerability in Security Account Manager Remote (SAMR) protocol could allow security feature bypass: March 11, 2014

Introduction

This update resolves a vulnerability in Windows that could allow a security feature bypass if an attacker makes multiple attempts to match passwords to a username.

Summary

Microsoft has released security bulletin MS14-016. Learn more about how to obtain the fixes included in this security bulletin:

• For individual, small business, and organizational users, use the Windows automatic updating feature to install the fixes from Microsoft Update. To do this, see Get security updates automatically on the Microsoft Safety and Security Center website.

• For IT professionals, see Microsoft Security Bulletin MS14-016 on the Security TechCenter website.

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

More Information

More information about this security update

Known issues and additional information about this security update

The following articles contain additional information about this security update as it relates to individual product versions. The articles may contain known issue information. If this is the case, the known issue is listed under each article link.

• 2923392 MS14-016: Description of the security update for Active Directory: March 11, 2014
• 2933528 MS14-016: Description of the security update for Active Directory Application Mode: March 11, 2014