| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| MS12-032 | Vulnerability in TCP/IP Could Allow Elevation of Privilege (2688338) | Windows Vista | Important | 09-05-2012 |
Technical Information
Brief overview of the risk:
This security update resolves one publicly disclosed and one privately reported vulnerability in Microsoft Windows. The more severe of these vulnerabilities could allow elevation of privilege if an attacker logs on to a system and runs a specially crafted application.
Detailed Information on the risk:
A security feature bypass vulnerability exists in Windows due to the way that Windows Firewall handles outbound broadcast packets. An attacker who successfully exploited this vulnerability could bypass the Windows Firewall defense-in-depth mechanism to facilitate exploitation of other vulnerabilities.
Further information on this exploit is available at : MS12-032
Affected Software
Windows Vista Service Pack 2Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for 32-bit Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-based Systems
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core Installation)
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core Installation)
Windows Server 2008 R2 for x64-based Systems (Server Core Installation)
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core Installation)