Oval Definition:oval:org.mitre.oval:def:6806
Revision Date:2012-03-26Version:46
Title:TLSv1 Denial of Service Vulnerability
Description:The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of service (LSASS outage and reboot) via a crafted packet, aka "TLSv1 Denial of Service Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2010-3229
Platform(s):Microsoft Windows 7
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Product(s):
Definition Synopsis
  • Vulnerable Microsoft Windows Vista x86/x64 SP1, Server 2008 x86/x64/ia64
  • Microsoft Windows Vista (32-bit) Service Pack 1 is installed
  • OR Microsoft Windows Vista x64 Edition Service Pack 1 is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows Server 2008 (ia-64) is installed
  • AND GDR or LDR Service branch
  • the version of schannel.dll is less than 6.0.6001.18507
  • OR LDR
  • the version of schannel.dll is greater than or equal to 6.0.6001.22000
  • AND the version of schannel.dll is less than 6.0.6001.22739
  • OR Vulnerable Microsoft Windows Vista x86/x64 SP2, Server 2008 x86/x64/ia64 SP2
  • Microsoft Windows Vista (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Vista x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed
  • AND GDR or LDR Service branch
  • the version of schannel.dll is less than 6.0.6002.18290
  • OR LDR
  • the version of schannel.dll is greater than or equal to 6.0.6002.22000
  • AND the version of schannel.dll is less than 6.0.6002.22463
  • OR Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64
  • Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • AND GDR or LDR Service branch
  • the version of schannel.dll is less than 6.1.7600.16661
  • OR LDR
  • the version of schannel.dll is greater than or equal to 6.1.7600.20000
  • AND the version of schannel.dll is less than 6.1.7600.20785
  • BACK