int(2199)

Vulnerability Bulletins


Denegación de Servicio IGMP v3 en Microsoft Windows

Vulnerability classification

Property Value
Confidence level Oficial
Impact Denegación de Servicio
Dificulty Experto
Required attacker level Acceso remoto sin cuenta a un servicio estandar

System information

Property Value
Affected manufacturer Microsoft
Affected software Microsoft Windows XP SP1, SP2
Microsoft Windows Server 2003 <= SP1

Description

Se ha descubierto una vulnerabilidad en Microsoft Windows XP SP1, SP2 y Microsoft Windows Server 2003 hasta el SP1. La vulnerabilidad reside en el manejo de ciertos paquetes IGMP.

Un atacante remoto podría causar una denegación de servicio mediante paquetes IGMP especialmente diseñados.

Solution



Actualización de software

Microsoft
Microsoft Windows XP SP1, Microsoft Windows XP SP2
http://www.microsoft.com/downloads/details.aspx?FamilyId=7BB21D74-C37B-472B-BB10-71D4680680A7
Microsoft Windows XP Professional x64
http://www.microsoft.com/downloads/details.aspx?FamilyId=8E2538CC-CC90-4DB7-8D0B-0B8BA4234E67
Microsoft Windows Server 2003, Microsoft Windows Server 2003 SP1
http://www.microsoft.com/downloads/details.aspx?FamilyId=78D7DF14-6049-4318-89CA-9C8681CED8AB
Microsoft Windows Server 2003 Itanium, Microsoft Windows Server 2003 SP1 Itanium
http://www.microsoft.com/downloads/details.aspx?FamilyId=9AE276CF-AB46-4198-BCB3-3EFFDF15550E
Microsoft Windows Server 2003 x64 Edition
http://www.microsoft.com/downloads/details.aspx?FamilyId=12AAE69E-C5C3-4E4A-9970-F5DB84DD9744

Standar resources

Property Value
CVE CVE-2006-0021
BID

Other resources

Microsoft Security Bulletin (MS06-007)
http://www.microsoft.com/technet/security/Bulletin/MS06-007.mspx

Microsoft Security Bulletin (MS06-032)
http://www.microsoft.com/technet/security/Bulletin/MS06-032.mspx

Version history

Version Comments Date
1.0 Aviso emitido 2006-02-15
1.1 Aviso emitido por Microsoft (MS06-032) 2006-06-23
Ministerio de Defensa
CNI
CCN
CCN-CERT