PT-2013-4206 · Microsoft · Windows Server 2012+1

Published 2013-08-14 · Updated 2018-10-12 · CVE-2013-3182

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2012

Description A denial of service issue exists due to improper validation of memory addresses during the processing of ICMP packets. This allows remote attackers to cause a denial of service, resulting in memory corruption and system hang, via crafted packets.

Recommendations For Microsoft Windows Server 2012, apply the necessary patch or update to fix the Windows NAT Driver issue, as no specific workaround is provided for this version.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-3182

Affected Products

Windows Server 2012

Windows

References · 6

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-064 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-3182 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3182 · Security Note
• http://technet.microsoft.com/en-us/security/bulletin/ms13-064 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18199 · Note
• http://us-cert.gov/ncas/alerts/TA13-225A · Note