Oval Definition:oval:org.mitre.oval:def:17918
Revision Date:2013-09-30Version:22
Title:Vulnerability in ICMPv6 could allow Denial of Service - MS13-065
Description:The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly perform memory allocation for inbound ICMPv6 packets, which allows remote attackers to cause a denial of service (system hang) via crafted packets, aka "ICMPv6 Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2013-3183
Platform(s):Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Vista
Product(s):
Definition Synopsis
  • Windows Vista / Server 2008 and vulnerable file version
  • Win Vista/ Server 2008
  • Microsoft Windows Vista (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Vista x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed
  • AND Check for vulnerable version
  • Check if the version of tcpip.sys is less than 6.0.6002.18880
  • OR Check for LDR
  • the version of Tcpip.sys is greater than or equal 6.0.6002.22000
  • AND Check if the version of tcpip.sys is less than 6.0.6002.23152
  • OR Windows 7 / 2008 R2 and vulnerable file versions
  • Windows 7 / 2008 R2
  • Microsoft Windows 7 (32-bit) Service Pack 1 is installed
  • OR Microsoft Windows 7 x64 Service Pack 1 is installed
  • OR Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed
  • AND Check for vulnerable versions
  • Check if the version of tcpip.sys is less than 6.1.7601.18203
  • OR Check for LDR
  • Check if the version of tcpip.sys is greater than or equal to 6.1.7601.22000
  • AND Check if the version of tcpip.sys is less than 6.1.7601.22378
  • OR Win 8 / 2012 and vulnerable file version
  • Win 8 / 2012
  • Microsoft Windows 8 (x86) is installed
  • OR Microsoft Windows 8 (x64) is installed
  • OR Microsoft Windows Server 2012 (64-bit) is installed
  • AND Check for vulnerable versions
  • Check if the version of tcpip.sys is less than 6.2.9200.16659
  • OR Check for LDR
  • Check if the version of tcpip.sys is greater than or equal to 6.2.9200.20000
  • AND Check if the version of tcpip.sys is less than 6.2.9200.20767
  • BACK