CVE-2010-3229

15Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 50%

probabilidade de exploração

50%top 1% das CVEs

exploração observada

nãonenhuma fonte reporta

The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of service (LSASS outage and reboot) via a crafted packet, aka "TLSv1 Denial of Service Vulnerability."

Produtos afetados

n/a · n/a

Referências

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-085 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6806 http://support.avaya.com/css/P8/documents/100113338 http://www.securityfocus.com/bid/43780 http://www.us-cert.gov/cas/techalerts/TA10-285A.html