A spoofing issue exists due to incomplete validation of the distinguished name in a digital certificate. This can be combined with other attacks, such as DNS spoofing, allowing an attacker to spoof a digital certificate of a website for applications using Windows HTTP Services.