Vulnerability CVE-2012-5362

Vulnerability CVE-2012-5362

Published: 2020-02-20

Description:

The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Neighbor Solicitation messages, a different vulnerability than CVE-2010-4669.

Type:

CWE-400

(Uncontrolled Resource Consumption ('Resource Exhaustion'))

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:N/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
7.8/10	6.9/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
None	None	Complete

Affected software
Microsoft -> Windows 7
Microsoft -> Windows server 2003
Microsoft -> Windows vista
Microsoft -> Windows xp

References:

http://www.openwall.com/lists/oss-security/2012/10/10/12

https://www.securityfocus.com/bid/56170/info

Copyright 2024, cxsecurity.com