Buffer over-read in Windows Active Directory Certificate Services allows an authorized attacker to disclose information over a network.