CVE-2010-3229

The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x…

published October 13, 2010

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 98.9th percentile for exploit probability.

CVSS

—

EPSS

50%

Percentile

98.9

In the wild

Unconfirmed

What it is

The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of service (LSASS outage and reboot) via a crafted packet, aka "TLSv1 Denial of Service Vulnerability."

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.50231 · 98.9th percentile
Published: 2010-10-13T18:00Z

EPSS history

Timeline

13 OCT 18:00Z
The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x…
cvelistv5