[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247862

 
 

909

 
 

194603

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2012-0174Date: (C)2012-05-08   (M)2023-12-22


Windows Firewall in tcpip.sys in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly enforce firewall rules for outbound broadcast packets, which allows remote attackers to obtain potentially sensitive information by observing broadcast traffic on a local network, aka "Windows Firewall Bypass Vulnerability."

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 1.7
Exploit Score: 3.1
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: SINGLE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE
  
Reference:
SECTRACK-1027044
SECUNIA-49114
BID-53352
OSVDB-81730
MS12-032
TA12-129A
ms-win-broadcast-sec-bypass(75128)
oval:org.mitre.oval:def:15160

CPE    7
cpe:/o:microsoft:windows_server_2008:r2
cpe:/o:microsoft:windows_7:-:sp1:x86
cpe:/o:microsoft:windows_7:-:sp1:x64
cpe:/o:microsoft:windows_server_2008:-:sp2
...
CWE    1
CWE-264
OVAL    2
oval:org.secpod.oval:def:5583
oval:org.secpod.oval:def:5581

© SecPod Technologies