Check Point Advisories

Preemptive Protection against Microsoft Windows TCP/IP ICMP Denial of Service (MS11-064; CVE-2011-1871)

Check Point Reference: CPAI-2011-354
Date Published: 9 Aug 2011
Severity: High
Last Updated: Saturday 01 January, 2011
Source: Microsoft Security Bulletin MS11-064
Industry Reference:CVE-2011-1871
Protection Provided by:
Who is Vulnerable? Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for 32-bit Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-based Systems
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
Vulnerability Description A denial of service (DoS) vulnerability has been reported in Microsoft Windows TCP/IP stack. An attacker could exploit this vulnerability to cause a DoS condition in an affected system. As a result, the system may become unresponsive and automatically reboot.
Vulnerability DetailsThis is a denial of service vulnerability. The issue occurs when the Windows TCP/IP stack processes a sequence of malicious ICMP messages in an improper manner. A remote attacker can exploit this vulnerability by creating a program that will send sequences of malicious ICMP messages to an affected system. Successful exploitation may enable an attacker to create a DoS condition in an affected system. As a result, the system may become unresponsive and automatically reboot.

Protection Overview

×
  Feedback
This website uses cookies for its functionality and for analytics and marketing purposes. By continuing to use this website, you agree to the use of cookies. For more information, please read our Cookies Notice.
OK