Description
The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled, allows remote attackers to cause a denial of service via fragmented router advertisement ICMP packets that trigger an out-of-bounds read, aka "Windows Kernel TCP/IP/ICMP Vulnerability."
References
- MS08-001 vendor-advisory
- 20070108 Multiple (3) Microsoft Windows TCP/IP Remote Code Execution and DoS Vulnerabilities third-party-advisory
- TA08-008A third-party-advisory
- 1019166 vdb-entry
- http://blogs.technet.com/swi/archive/2008/01/08/ms08-001-part-2-the-case-of-the-moderate-icmp-mitigations.aspx
- 28297 third-party-advisory
- 27139 vdb-entry
- ADV-2008-0069 vdb-entry
- oval:org.mitre.oval:def:5271 vdb-entry signature
- win-tcpip-icmp-dos(39254) vdb-entry
- SSRT080003 vendor-advisory