Oval Definition:	oval:org.mitre.oval:def:12318
Revision Date: 2011-09-26 Version: 22 Title: TCP/IP QOS Denial of Service Vulnerability Description: Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service (reboot) via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2011-1965 Platform(s): Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Product(s): Definition Synopsis Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64 Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64 Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND GDR or LDR Service branch The version of Tcpip.sys is less than 6.1.7600.16839 OR LDR The version of Tcpip.sys is greater than or equal 6.1.7600.20000 AND The version of Tcpip.sys is less than 6.1.7600.20992 OR Windows 7 x86/x64 SP1, Windows Server 2008 R2 x64/ia64 SP1 Vulnerable Microsoft Windows 7 x86/x64 SP1, Windows Server 2008 R2 x64 SP1 Microsoft Windows 7 (32-bit) Service Pack 1 is installed OR Microsoft Windows 7 x64 Service Pack 1 is installed OR Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed AND GDR or LDR Service branch The version of Tcpip.sys is less than 6.1.7601.17638 OR LDR The version of Tcpip.sys is greater than or equal 6.1.7601.21000 AND The version of Tcpip.sys is less than 6.1.7601.21754
BACK