CVE-2010-0812
Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to bypass intended IPv4 source-address restrictions via a mismatched IPv6 source address in a tunneled ISATAP packet, aka…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 17.5%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to bypass intended IPv4 source-address restrictions via a mismatched IPv6 source address in a tunneled ISATAP packet, aka "ISATAP IPv6 Source Address Spoofing Vulnerability."
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 17.45% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- microsoft/windows xp · microsoft/windows 2003 server · microsoft/windows server 2003 · microsoft/windows server 2008 · microsoft/windows vista
- Source
- secure@microsoft.com
References
- http://secunia.com/advisories/39382
- http://www.us-cert.gov/cas/techalerts/TA10-103A.htmlUS Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-029
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7574
- http://secunia.com/advisories/39382
- http://www.us-cert.gov/cas/techalerts/TA10-103A.htmlUS Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-029
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7574
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.