Improper verification of cryptographic signature in Windows Certificates allows an unauthorized attacker to perform spoofing over a network.
Weakness
The product does not verify, or incorrectly verifies, the cryptographic signature for data.
References