CVE-2010-0240

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when a custom network driver is used, does not properly…

published February 10, 2010

CVSS
—
EPSS
49%
Percentile
98.9
In the wild
Unconfirmed
What it is

🚨 A crafty network driver could turn your Windows Vista or Server 2008 into a playground for attackers! Think of it like a chef cooking with ingredients that don’t quite mix. If the chef isn’t careful with how they combine them, the whole dish could end up a disaster — that's how improperly handled packets can lead to unexpected code execution! An attacker can send specially crafted packets, which may lead to remote code execution, potentially giving them the ability to control or manipulate systems at will. This could result in anything from data breaches to complete system compromise, making it a chilling vulnerability to consider.

Put simply

Think of it like a chef cooking with ingredients that don’t quite mix. If the chef isn’t careful with how they combine them, the whole dish could end up a disaster — that's how improperly handled packets can lead to unexpected code execution! This vulnerability arises when the TCP/IP implementation fails to manage local fragmentation of Encapsulating Security Payload (ESP) over UDP packets properly, particularly with custom network drivers. This oversight allows attackers to execute arbitrary code through maliciously designed packets.

What to do

An attacker can send specially crafted packets, which may lead to remote code execution, potentially giving them the ability to control or manipulate systems at will. This could result in anything from data breaches to complete system compromise, making it a chilling vulnerability to consider. If you're running any affected versions, it's crucial to ensure you're using an updated network driver that properly handles fragmentation. Regularly check for updates from Microsoft to patch any vulnerabilities, and consider enhancing your network security practices. 🛡️ You’ve got this! Stay vigilant and keep your systems up-to-date for a safer digital environment! ✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.48764 · 98.9th percentile
Published
2010-02-10T18:00Z
EPSS history
Timeline
  • 10 FEB 18:00Z
    The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when a custom network driver is used, does not properly…
    cvelistv5