Oval Definition:oval:org.mitre.oval:def:5370
Revision Date:2011-11-14Version:24
Title:Windows Kernel TCP/IP/IGMPv3 and MLDv2 Vulnerability
Description:Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via crafted (1) IGMPv3 and (2) MLDv2 packets that trigger memory corruption, aka "Windows Kernel TCP/IP/IGMPv3 and MLDv2 Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2007-0069
Platform(s):Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows XP
Product(s):
Definition Synopsis
  • Win XP X86 SP2 and vulnerable version
  • Microsoft Windows XP (x86) SP2 is installed
  • AND the version of tcpip.sys is less than 5.1.2600.3244
  • OR Win XP X64 SP1 or Win 2K3 SP1 and vulnerable version
  • Win XP 64 SP1 / Win 2k3 SP1
  • Microsoft Windows XP Professional x64 Edition SP1 is installed
  • OR Microsoft Windows Server 2003 SP1 (x86) is installed
  • OR Microsoft Windows Server 2003 SP1 (x64) is installed
  • OR Microsoft Windows Server 2003 SP1 for Itanium is installed
  • AND the version of tcpip.sys is less than 5.2.3790.3036
  • OR Win XP X64 SP2 / Win 2K3 SP2 and vulnerable version of file
  • the version of tcpip.sys is less than 5.2.3790.4179
  • AND Win 2K3 Sp2 / Win XP X64 SP2
  • Microsoft Windows XP x64 Edition SP2 is installed
  • OR Microsoft Windows Server 2003 SP2 (x86) is installed
  • OR Microsoft Windows Server 2003 SP2 (x64) is installed
  • OR Microsoft Windows Server 2003 (ia64) SP2 is installed
  • OR Vista and vulnerable range
  • Microsoft Windows Vista is installed
  • AND Check for LDR / GDR
  • the version of tcpip.sys is less than 6.0.6000.16567
  • OR Check for LDR
  • the version of Tcpip.sys is greater than or equal 6.0.6000.20000
  • AND Check if the version of tcpip.sys is less than 6.0.6000.20689
  • BACK