PT-2013-4206 · Microsoft · Windows Server 2012+1

Publicado 2013-08-14 · Atualizado 2018-10-12 · CVE-2013-3182

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2012

Description A denial of service issue exists due to improper validation of memory addresses during the processing of ICMP packets. This allows remote attackers to cause a denial of service, resulting in memory corruption and system hang, via crafted packets.

Recommendations For Microsoft Windows Server 2012, apply the necessary patch or update to fix the Windows NAT Driver issue, as no specific workaround is provided for this version.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-3182

Produtos afetados

Windows Server 2012

Windows

Referências · 6

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-064 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-3182 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3182 · Nota de Segurança
• http://technet.microsoft.com/en-us/security/bulletin/ms13-064 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18199 · Nota
• http://us-cert.gov/ncas/alerts/TA13-225A · Nota