Denial of Service Vulnerability in Microsoft Windows 7 and Earlier
CVE-2012-5364

7.5HIGH

Key Information:

Vendor
Microsoft
Status
Windows 7
Windows Vista
Windows Xp
Windows Server 2003
Vendor
CVE Published:
20 February 2020

Summary

The IPv6 implementation in Microsoft Windows 7 and earlier is susceptible to a denial of service attack. Attackers can exploit this vulnerability by sending a flood of ICMPv6 Router Advertisement packets, which may contain multiple routing entries. This could lead to significant network disruptions, making services unavailable to legitimate users. It is crucial for organizations using these Windows versions to implement security measures to mitigate the risks associated with this vulnerability.

References

http://www.openwall.com/lists/oss-security/2012/10/10/12
x_refsource_MISC
https://www.securityfocus.com/bid/56170/info
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.