CVE-2010-1892

2010-08-1118:47:00

CWE-119

[email protected]

web.nvd.nist.gov

tcp/ip

windows vista

windows server 2008

windows 7

ipv6

memory corruption

denial of service

nvd

cve-2010-1892

6.5 Medium

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.128 Low

EPSS

Percentile

95.4%

JSON

The TCP/IP stack in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle malformed IPv6 packets, which allows remote attackers to cause a denial of service (system hang) via multiple crafted packets, aka “IPv6 Memory Corruption Vulnerability.”

CPENameOperatorVersion
microsoft:windows_server_2008microsoft windows server 2008eq-
microsoft:windows_server_2008microsoft windows server 2008eq*
microsoft:windows_7microsoft windows 7eq-
microsoft:windows_7microsoft windows 7eq*
microsoft:windows_vistamicrosoft windows vistaeq*

CPE	Name	Operator	Version
microsoft:windows_server_2008	microsoft windows server 2008	eq	-
microsoft:windows_server_2008	microsoft windows server 2008	eq	*
microsoft:windows_7	microsoft windows 7	eq	-
microsoft:windows_7	microsoft windows 7	eq	*
microsoft:windows_vista	microsoft windows vista	eq	*