PT-2014-1028 · Microsoft · Windows+2
Publicado
2014-02-11
·
Atualizado
2018-10-12
·
CVE-2014-0254
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft Windows versions prior to the fixed version
Windows Server 2012 versions prior to the fixed version
Windows RT versions prior to the fixed version
Description
The issue is related to the IPv6 implementation in Microsoft Windows, which does not properly validate packets. This allows remote attackers to cause a denial of service, resulting in a system hang, via crafted ICMPv6 Router Advertisement packets. An attacker who successfully exploits this issue could cause the affected system to stop responding.
Recommendations
For Microsoft Windows versions prior to the fixed version, update to the fixed version to resolve the issue.
For Windows Server 2012 versions prior to the fixed version, update to the fixed version to resolve the issue.
For Windows RT versions prior to the fixed version, update to the fixed version to resolve the issue.
As a temporary workaround, consider restricting access to ICMPv6 Router Advertisement packets to minimize the risk of exploitation.
Correção
DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Windows
Windows Rt
Windows Server 2012