CVE-2012-0179

Double free vulnerability in tcpip.sys in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that binds an IPv6 address to a local interface, aka "TCP/IP Double Free Vulnerability."...

Double free

Double free vulnerability in tcpip.sys in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that binds an IPv6 address to a local interface, aka "TCP/IP Double Free Vulnerability."...

Microsoft Windows TCP/IP本地权限提升漏洞(MS12-032)

BUGTRAQ ID: 53349 CVE ID: CVE-2012-0179 Microsoft Windows是流行的计算机操作系统。 Microsoft Windows在实现上存在影响TCP/IP栈组件'tcpip.sys'的本地权限提升漏洞，攻击者可利用此漏洞通过在另一个进程中执行任意代码获取提升的权限，可能会造成拒绝服务。 0 Microsoft Server 2008 Windows Server 2008 R2 x64 SP1 Microsoft Server 2008 Windows Server 2008 R2 x64 0 Microsoft Server 2008...

CVE-2012-0179

CVE-2012-0179 is a local privilege-escalation vulnerability in the Windows TCP/IP stack (tcpip.sys) affecting Windows 7, Windows Server 2008 R2 and R2 SP1, and related builds. The issue arises from a double-free/ improper handling when binding an IPv6 address to a local interface, allowing a craf...

CVE-2012-0179

Double free vulnerability in tcpip.sys in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that binds an IPv6 address to a local interface, aka "TCP/IP Double Free Vulnerability."...

CVE-2011-1871

Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service reboot via a series of crafted ICMP messages, aka "ICMP Denial of Service Vulnerability."...

CVE-2011-1871

CVE-2011-1871 affects the Windows TCP/IP stack (Tcpip.sys) on Windows Vista SP2, Windows Server 2008 SP2/R2 and Windows 7 SP1. A remote attacker can send crafted ICMP messages to cause a denial of service (reboot). The vulnerability is addressed by MS11-064; apply the Microsoft patch to mitigate....

CVE-2010-1906

tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \.\pipe\RepairServicepipecompany named pipe, which allows remote authenticated users to execute arbitrary code by...

Code injection

tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \.\pipe\RepairServicepipecompany named pipe, which allows remote authenticated users to execute arbitrary code by...

CVE-2010-1906

tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \.\pipe\RepairServicepipecompany named pipe, which allows remote authenticated users to execute arbitrary code by...

Microsoft Windows TCP/IP协议驱动远程溢出漏洞（MS06-032）

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的TCP/IP协议驱动处理特定畸形的IP源路由报文时存在缓冲区溢出漏洞，远程攻击者可以通过发送有Loose Source and Record Route选项的特制ICMP报文触发这个漏洞，导致tcpip.sys或ntoskrnl.exe中出现错误而造成拒绝服务或执行任意指令。 默认情况下，Windows系统的路由及远程访问服务是关闭的，也就是说默认情况下系统不受此漏洞影响。 Microsoft Windows XP SP2 Microsoft Windows XP SP1...

MS Windows TCP/IP Protocol Driver Remote Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc ================================================================ MS Windows TCP/IP Protocol Driver Remote Buffer Overflow Exploit ================================================================ / Windows TCP/IP source routing poc C version... by...

Server crash on ICMP packets with Loose Source and Record Route IP options.

Short message translation: There are DoS conditions in Windows 2000 built-in NAT server. Tested configuration: Windows 2000 English Standard/Advanced Service Pack 4 + Update Rollup 1 for Service Pack 4 with NAT server enabled. While routing packets with options "Loose Source and Record Route"...

igmp v3 dos

Приветсвую. Реализация уязвимости. Драйвер tcpip.sys входит в бесконечный цикл. Так как при получении IGMP v3 пакета он ишет опцию Router Alert, но находит 0x0 - интерпритирует это как как длину и прибавляет к индексу. Индекс в итоге не меняется и он опять считывает ту же самую опцию, результат -...

DOS во встроенном NAT сервере Windows 2000

Обнаружил dos во встроенном NAT сервере Windows 2000 Конфигурация проверенных серверов: Windows 2000 English Standard/Advanced Service Pack 4 + Update Rollup 1 for Service Pack 4 с установленным NAT сервером. При прохождении ip пакетов через сервер, с включенной опцией "Loose Source and Record...

CVE-1999-1157

The issue (CVE-1999-1157) affects Tcpip.sys on Windows NT 4.0 before SP4. A remote attacker can cause denial of service by sending an ICMP Subnet Mask Address Request when multiple IP addresses are bound to the same network interface. The vulnerability impact is described as availability partial....