CVE-2010-0240: Improper Control of Generation of Code

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when a custom network driver is used, does not properly handle local fragmentation of Encapsulating Security Payload ESP over UDP packets, which allows remote attackers to execute arbitrary code...