ID de Prueba:	1.3.6.1.4.1.25623.1.0.801479
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft Windows TCP/IP Could Allow Remote Code Execution (974145)
Resumen:	This host is missing a critical security update according to; Microsoft Bulletin MS10-009.
Descripción:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS10-009. Vulnerability Insight: The flaws are due to Windows TCP/IP stack, - not performing the appropriate level of bounds checking on specially crafted 'ICMPv6' Router Advertisement packets. - fails to properly handle malformed Encapsulating Security Payloads (ESP) over UDP datagram fragments while running a custom network driver that splits the UDP header into multiple MDLs, which could be exploited by remote attackers to execute arbitrary code by sending specially crafted IP datagram fragments to a vulnerable system. - not performing the appropriate level of bounds checking on specially crafted ICMPv6 Route Information packets, which could be exploited by remote attackers to execute arbitrary code by sending specially crafted ICMPv6 packets to a vulnerable system. - not properly handling TCP packets with a malformed selective acknowledgment (SACK) value. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary code with system privileges. Failed exploit attempts will likely result in denial-of-service conditions. Affected Software/OS: - Microsoft Windows Vista Service Pack 1/2 and prior - Microsoft Windows Server 2008 Service Pack 1/2 and prior Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0239 Cert/CC Advisory: TA10-040A http://www.us-cert.gov/cas/techalerts/TA10-040A.html Microsoft Security Bulletin: MS10-009 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-009 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8478 Common Vulnerability Exposure (CVE) ID: CVE-2010-0240 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8400 Common Vulnerability Exposure (CVE) ID: CVE-2010-0241 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8516 Common Vulnerability Exposure (CVE) ID: CVE-2010-0242 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8449
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.