Design/Logic Flaw

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Route Information packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Route...

Out-of-bounds

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6...

Security feature bypass

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service system hang via crafted packets with malformed TCP selective acknowledgement SACK values, aka "TCP/IP Selective Acknowledgement Vulnerability."...

CVE-2010-0242

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service system hang via crafted packets with malformed TCP selective acknowledgement SACK values, aka "TCP/IP Selective Acknowledgement Vulnerability."...

CVE-2010-0240

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when a custom network driver is used, does not properly handle local fragmentation of Encapsulating Security Payload ESP over UDP packets, which allows remote attackers to execute arbitrary code...

CVE-2010-0239

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6...

CVE-2010-0242

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service system hang via crafted packets with malformed TCP selective acknowledgement SACK values, aka "TCP/IP Selective Acknowledgement Vulnerability."...

CVE-2010-0241

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Route Information packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Route...

CVE-2010-0240

CVE-2010-0240 concerns a remote code execution vulnerability in the Windows TCP/IP stack. Affected products from the provided documents include Windows Vista (Gold, SP1, SP2) and Windows Server 2008 (Gold, SP2). The issue arises when a custom network driver is used: the TCP/IP implementation does...

CVE-2010-0239

The CVE-2010-0239 issue affects Windows Vista (Gold, SP1, SP2) and Windows Server 2008 (Gold, SP2) when IPv6 is enabled. The vulnerability stems from inadequate bounds checking in the TCP/IP/ICMPv6 Router Advertisement processing, allowing remote code execution via specially crafted ICMPv6 Router...

CVE-2010-0241

CVE-2010-0241 is a Windows TCP/IP flaw in IPv6 processing where ICMPv6 Route Information packets bypass bounds checks, enabling remote code execution. Affected: Windows Vista (Gold, SP1, SP2) and Windows Server 2008 (Gold, SP2). Evidence: MS10-009 patch/ advisory; OpenVAS/Seebug entries confirm W...

Microsoft Windows TCP/IP and TCP/IPv6 multiple security vulnerabilities

Multiple memory corruptions in ICMPv6, IPSec, TCP implementations...

Microsoft Windows Vista2008 - ICMPv6 Router Advertisement Remote Code Execution

Microsoft Windows Vista2008 - ICMPv6 Router Advertisement Remote Code Execution source: https://www.securityfocus.com/bid/38061/info Microsoft Windows TCP/IP protocol implementation is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code wit...

Microsoft Windows ICMPv6 Router Advertisement Remote Code Execution Vulnerability

Description Microsoft Windows TCP/IP protocol implementation is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful attacks will completely compromise affected computers. Failed exploit attempts will...

MS10-009: Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (974145)

The remote Windows host has the following vulnerabilities in its TCP/IP implementation : - Hosts with IPv6 enabled perform insufficient bounds checking when processing specially crafted ICMPv6 Router Advertisement packets. A remote attacker could exploit this to execute arbitrary code...

Microsoft Windows Header MDL Fragmentation Remote Code Execution Vulnerability

Description Microsoft Windows TCP/IP protocol implementation is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful attacks will completely compromise affected computers. Technologies Affected...

Microsoft Windows TCP/IP Selective Acknowledgement Remote Denial of Service Vulnerability

Description Microsoft Windows TCP/IP protocol implementation is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to render the affected system unresponsive and cause it to automatically restart. Repeated attacks will cause denial-of-service conditions...

Microsoft Security Bulletin MS10-009 - Critical Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (974145)

Microsoft Security Bulletin MS10-009 - Critical Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution 974145 Published: February 09, 2010 Version: 1.0 General Information Executive Summary This security update resolves four privately reported vulnerabilities in Microsoft Windows. Th...

Microsoft Windows ICMPv6 Route Information Remote Code Execution Vulnerability

Description Microsoft Windows TCP/IP protocol implementation is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful attacks will completely compromise affected computers. Failed exploit attempts will...

EMC RepliStor rep_srv and ctrlservice Denial of Service (CVE-2009-3744)

EMC RepliStor is a data recovery and protection system exclusively for Microsoft Windows. Recovery and protection are achieved by providing easy to use data replication to multiple sources in real-time or on a schedule. Files, directories, volumes and shares can be replicated as long as TCP/IP...