Microsoft Windows PGM报文多个拒绝服务漏洞（MS08-036）

BUGTRAQ ID: 29508,29509 CVECAN ID: CVE-2008-1440,CVE-2008-1441 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的实际通用多播（PGM）协议实现中存在多个拒绝服务漏洞，如果远程攻击者发送了带有无效长度的PGM报文，或PGM畸形碎片的话，就可能导致系统停止响应。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft Window...

Microsoft Windows PGM Fragment Handling Denial of Service (MS08-036; CVE-2008-1441)

PGM is a reliable and scalable multicast protocol that enables receivers to detect loss, request retransmission of lost data, or notify an application of unrecoverable loss. The vulnerability is due to the PGM's parsing code that fails to properly handle malformed PGM packets that contain an...

CVE-2008-1441

CVE-2008-1441 describes a denial-of-service vulnerability in Pragmatic General Multicast (PGM) in Windows XP (SP2/SP3), Windows Server 2003 (SP1/SP2), Windows Vista (Gold/SP1), and Windows Server 2008. The flaw is due to improper validation in the PGM parser when handling malformed PGM fragments,...