Improper input validation in Windows DNS allows an authorized attacker to perform spoofing over a network.
CWE-22