Lucene search

[email protected]CVE-2012-0179

HistoryMay 09, 2012 - 12:55 a.m.

CVE-2012-0179

2012-05-0900:55:01

CWE-264

[email protected]

web.nvd.nist.gov

cve-2012-0179

double free vulnerability

tcpip.sys

microsoft

windows server 2008 r2

windows 7

nvd

security vulnerability

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.6%

JSON

Double free vulnerability in tcpip.sys in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that binds an IPv6 address to a local interface, aka “TCP/IP Double Free Vulnerability.”

Affected configurations

NVD

Node

microsoftwindows_7

microsoftwindows_7sp1x64

microsoftwindows_7sp1x86

microsoftwindows_server_2008Matchr2

microsoftwindows_server_2008Matchr2sp1

CPENameOperatorVersion
microsoft:windows_7microsoft windows 7eq*
microsoft:windows_server_2008microsoft windows server 2008eqr2

CPE	Name	Operator	Version
microsoft:windows_7	microsoft windows 7	eq	*
microsoft:windows_server_2008	microsoft windows server 2008	eq	r2

References

osvdb.org/81729

secunia.com/advisories/49114

www.securityfocus.com/bid/53349

www.securitytracker.com/id?1027044

www.us-cert.gov/cas/techalerts/TA12-129A.html

docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-032

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14908

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.6%

JSON

Related for CVE-2012-0179

nvd1 symantec1 seebug1 prion1 cvelist1 openvas2 nessus1 securityvulns1