Description
The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via crafted packets with malformed TCP selective acknowledgement (SACK) values, aka "TCP/IP Selective Acknowledgement Vulnerability."
References
- MS10-009 vendor-advisory
- oval:org.mitre.oval:def:8449 vdb-entry signature
- TA10-040A third-party-advisory