Microsoft Security Tool Has Denial-of-service Flaw