vendor:
Windows
by:
Yuri Gushin and Alex Behar
7.5
CVSS
HIGH
Remote Code Execution
119
CWE
Product Name: Windows
Affected Version From: Microsoft Windows
Affected Version To: Microsoft Windows
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2005
Microsoft Windows Remote Code Execution Vulnerability
Microsoft Windows is reported prone to a remote code execution vulnerability. It is reported that the vulnerability manifests when an affected Microsoft platform receives and processes an especially malformed TCP/IP packet. Reports indicate that the immediate consequences of exploitation of this issue are a denial of service.
Mitigation:
Validate the option-size field is less than 40.
