Microsoft Dynamics AX 4.0 SP2 2009 SP1 2012 and 2012 R2 allows remote authenticated users to cause a denial of service (instance outage) via crafted data to an Application Object Server (AOS) instance aka \Query Filter DoS Vulnerability.\