Test ID:	1.3.6.1.4.1.25623.1.0.801479
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Windows TCP/IP Could Allow Remote Code Execution (974145)
Summary:	This host is missing a critical security update according to; Microsoft Bulletin MS10-009.
Description:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS10-009. Vulnerability Insight: The flaws are due to Windows TCP/IP stack, - not performing the appropriate level of bounds checking on specially crafted 'ICMPv6' Router Advertisement packets. - fails to properly handle malformed Encapsulating Security Payloads (ESP) over UDP datagram fragments while running a custom network driver that splits the UDP header into multiple MDLs, which could be exploited by remote attackers to execute arbitrary code by sending specially crafted IP datagram fragments to a vulnerable system. - not performing the appropriate level of bounds checking on specially crafted ICMPv6 Route Information packets, which could be exploited by remote attackers to execute arbitrary code by sending specially crafted ICMPv6 packets to a vulnerable system. - not properly handling TCP packets with a malformed selective acknowledgment (SACK) value. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary code with system privileges. Failed exploit attempts will likely result in denial-of-service conditions. Affected Software/OS: - Microsoft Windows Vista Service Pack 1/2 and prior - Microsoft Windows Server 2008 Service Pack 1/2 and prior Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0239 Cert/CC Advisory: TA10-040A http://www.us-cert.gov/cas/techalerts/TA10-040A.html Microsoft Security Bulletin: MS10-009 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-009 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8478 Common Vulnerability Exposure (CVE) ID: CVE-2010-0240 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8400 Common Vulnerability Exposure (CVE) ID: CVE-2010-0241 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8516 Common Vulnerability Exposure (CVE) ID: CVE-2010-0242 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8449
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.