CVE-2010-1892

The TCP/IP stack in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle malformed IPv6 packets, which allows remote attackers to cause a denial of service system hang via multiple crafted packets, aka "IPv6 Memory Corruption...

CVE-2010-1893

Integer overflow in the TCP/IP stack in Microsoft Windows Vista SP1, Windows Server 2008 Gold and R2, and Windows 7 allows local users to gain privileges via a buffer of user-mode data that is copied to kernel mode, aka "Integer Overflow in Windows Networking Vulnerability."...

Memory corruption

The TCP/IP stack in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle malformed IPv6 packets, which allows remote attackers to cause a denial of service system hang via multiple crafted packets, aka "IPv6 Memory Corruption...

Integer overflow

Integer overflow in the TCP/IP stack in Microsoft Windows Vista SP1, Windows Server 2008 Gold and R2, and Windows 7 allows local users to gain privileges via a buffer of user-mode data that is copied to kernel mode, aka "Integer Overflow in Windows Networking Vulnerability."...

CVE-2010-1893

CVE-2010-1893 corresponds to an Integer Overflow in the Windows TCP/IP stack that affects Windows Vista SP1, Windows Server 2008 (Gold/R2), and Windows 7. The vulnerability arises when user-mode data is copied to kernel memory, leading to a pool/heap overflow in the IppSortDestinationAddresses/Ip...

CVE-2010-1892

The TCP/IP stack in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle malformed IPv6 packets, which allows remote attackers to cause a denial of service system hang via multiple crafted packets, aka "IPv6 Memory Corruption...

CVE-2010-1892

CVE-2010-1892 is a DoS vulnerability in the Windows TCP/IP stack caused by improper handling of malformed IPv6 packets. Affected products include Windows Vista SP1/SP2, Windows Server 2008 (Gold/SP2/R2), and Windows 7. The issue arises from processing IPv6 extension headers, leading to a system h...

CVE-2010-1893

Integer overflow in the TCP/IP stack in Microsoft Windows Vista SP1, Windows Server 2008 Gold and R2, and Windows 7 allows local users to gain privileges via a buffer of user-mode data that is copied to kernel mode, aka "Integer Overflow in Windows Networking Vulnerability."...

Microsoft Security Bulletin MS10-058 - Important Vulnerabilities in TCP/IP Could Allow Elevation of Privilege (978886)

Microsoft Security Bulletin MS10-058 - Important Vulnerabilities in TCP/IP Could Allow Elevation of Privilege 978886 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in Microsoft Windows. The more...

MS10-058: Vulnerabilities in TCP/IP Could Allow Elevation of Privilege (978886)

The TCP/IP stack installed on the remote Windows host is affected by one or more of the following vulnerabilities : - An error exists in the Windows TCP/IP stack when processing specially crafted IPv6 packets with a malformed extension header that could cause the affected system to stop respondin...

Microsoft Windows TCP/IP stack security vulnerabilities

DoS, privilege escalation...

Microsoft Windows TCP/IP IPv6 Extension Header Remote Denial of Service Vulnerability

Description Microsoft Windows TCP/IP protocol implementation is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to render the affected system unresponsive, resulting in denial-of-service conditions. Technologies Affected Avaya Aura Conferencing 6.0 Standard...

Microsoft Windows TCP/IP Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the TCP/IP implementation. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will result in the complete compromise of affected computer...

CVE-2010-2394

Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to TCP/IP...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to TCP/IP...

CVE-2010-2394

Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to TCP/IP...

CVE-2010-2394

CVE-2010-2394 affects Oracle Solaris 10. The connected Oracle CPU July 2010 advisory lists Solaris as impacted by a TCP/IP–related vulnerability that allows local users to affect availability. The CVSS base score is 4.7 (MEDIUM) with local attack vector and availability impact. The provided docum...

kernel security update

CentOS Errata and Security Advisory CESA-2010:0394 Updated kernel packages that fix multiple security issues, several bugs, and add three enhancements are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5.4 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores...

Microsoft Windows ISATAP IPv6 Source Address Spoofing (CVE-2010-0812)

The Intra-Site Automatic Tunnel Addressing Protocol ISATAP provides IPv6 connectivity within an IPv4 Intranet. A spoofing vulnerability has been reported in Microsoft Windows due to the way that Windows checks the inner packet's IPv6 source address in a tunneled ISATAP packet. The vulnerability i...