« Volver al listado

CVE-2010-1892

Estado: ModificadaAlta (7.8)—

La pila TCP/IP en Microsoft Windows Vista SP1 y SP2, Windows Server 2008 Gold, SP2 y R2 y Windows 7 no maneja de manera apropiada paquetes IPv6 malformados, lo que permite a atacantes remotos provocar una denegación de servicio (cuelgue del sistema) mediante múltiples paquetes manipulados, también conocido como "IPv6 Memory Corruption Vulnerability."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Microsoft — Windows 7Microsoft — Windows Server 2008Microsoft — Windows Vista

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-1892",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secure@microsoft.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-08-11T18:47:50.077",
  "references": [
    {
      "url": "http://www.us-cert.gov/cas/techalerts/TA10-222A.html",
      "tags": [
        "US Government Resource"
      ],
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-058",
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11845",
      "source": "secure@microsoft.com"
    },
    {
      "url": "http://www.us-cert.gov/cas/techalerts/TA10-222A.html",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-058",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11845",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The TCP/IP stack in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle malformed IPv6 packets, which allows remote attackers to cause a denial of service (system hang) via multiple crafted packets, aka \"IPv6 Memory Corruption Vulnerability.\""
    },
    {
      "lang": "es",
      "value": "La pila TCP/IP en Microsoft Windows Vista SP1 y SP2, Windows Server 2008 Gold, SP2 y R2 y Windows 7 no maneja de manera apropiada paquetes IPv6 malformados, lo que permite a atacantes remotos provocar una denegación de servicio (cuelgue del sistema) mediante múltiples paquetes manipulados, también conocido como \"IPv6 Memory Corruption Vulnerability.\""
    }
  ],
  "lastModified": "2026-06-16T23:19:32.340",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D56B932B-9593-44E2-B610-E4EB2143EB21"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E33796DB-4523-4F04-B564-ADF030553D51"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9CFB1A97-8042-4497-A45D-C014B5E240AB"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F9C7616-658D-409D-8B53-AC00DC55602A"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B2B19826-5516-4899-9599-F95D0A03FBCD"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4945F25F-2828-4D03-930B-A109BA73E00C"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FFF81F4B-7D92-4398-8658-84530FB8F518"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0A0D2704-C058-420B-B368-372D1129E914"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@microsoft.com"
}