Microsoft Windows WPAD Elevation of Privilege Vulnerability (CVE-2016-3213)

NetBIOS Name Service (NBNS) is a broadcast UDP protocol for name resolution commonly used in Windows environment. WPAD protocol falls back to NBNS when it can't resolve the IP of WPAD server with DHCP and DNS. An attacker can spoof the WPAD NBNS response with malicious IP.