----------------------------------------------------------------------



Secunia integrated with Microsoft WSUS 
http://secunia.com/blog/71/



----------------------------------------------------------------------

TITLE:
Microsoft Windows TCP/IP Implementation Vulnerabilities

SECUNIA ADVISORY ID:
SA38506

VERIFY ADVISORY:
http://secunia.com/advisories/38506/

DESCRIPTION:
Some vulnerabilities have been reported in Microsoft Windows, which
can be exploited by malicious people to cause a DoS (Denial of
Service) or compromise a vulnerable system.

1) A boundary error in the TCP/IP implementation can be exploited to
potentially execute arbitrary code via specially crafted ICMPv6
Router Advertisement packets.

2) A boundary error in the TCP/IP implementation can be exploited to
potentially execute arbitrary code via specially crafted ICMPv6 Route
Information packets.

Successful exploitation of the vulnerabilities requires that the
attacker is on the same physical or virtual network link with the
victim.

3) An error in the TCP/IP implementation can be exploited to
potentially execute arbitrary code via specially crafted
Encapsulating Security Payloads (ESP) over UDP datagram fragments.

Successful exploitation of this vulnerability requires that a custom
network driver that splits a received UDP header into multiple MDLs
is installed.

4) An error in the TCP/IP implementation can be exploited to hang an
affected system via multiple TCP packets containing malformed
selective acknowledgment (SACK) values.

SOLUTION:
Apply patches.

Windows Vista (optionally with SP1 or SP2):
http://www.microsoft.com/downloads/details.aspx?familyid=71f03946-622c-4403-b94f-f6a3de18a8c3

Windows Vista x64 Edition (optionally with SP1 or SP2):
http://www.microsoft.com/downloads/details.aspx?familyid=519815fd-707d-476f-9e29-7b03b7a17af5

Windows Server 2008 for 32-bit Systems (optionally with SP2):
http://www.microsoft.com/downloads/details.aspx?familyid=bc451228-3de4-427c-b42f-91f204c708b8

Windows Server 2008 for x64-based Systems (optionally with SP2):
http://www.microsoft.com/downloads/details.aspx?familyid=3a889152-5d7c-4a3e-b4f1-c6507b739ca0

Windows Server 2008 for Itanium-based Systems (optionally with SP2):
http://www.microsoft.com/downloads/details.aspx?familyid=1cd1882b-8e55-47ea-a82a-68bb59a500a7

PROVIDED AND/OR DISCOVERED BY:
1, 2, 3) The vendor credits Sumit Gwalani, Drew Hintz, and Neel Mehta
of Google Security Team.
4) Reported by the vendor.

ORIGINAL ADVISORY:
Microsoft (KB974145):
http://www.microsoft.com/technet/security/Bulletin/MS10-009.mspx

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------