(MS12-032) Vulnerability in TCP/IP Could Allow Elevation of Privilege (2688338)

  Severity: HIGH
  CVE Identifier: CVE-2012-0174,CVE-2012-0179
  Advisory Date: MAY 09, 2012

  DESCRIPTION

This update resolves the following vulnerabilities in affected Windows versions:

  • Windows Firewall Bypass Vulnerability
  • TCP/IP Double Free Vulnerability

When exploited, the more critical of these vulnerabilities could allow an attacker to elevate his privileges on the affected computer.

  SOLUTION

  AFFECTED SOFTWARE AND VERSION

  • Windows Vista Service Pack 2
  • Windows Vista x64 Edition Service Pack 2
  • Windows Server 2008 for 32-bit Systems Service Pack 2
  • Windows Server 2008 for x64-based Systems Service Pack 2
  • Windows Server 2008 for Itanium-based Systems Service Pack 2
  • Windows 7 for 32-bit Systems
  • Windows 7 for 32-bit Systems Service Pack 1
  • Windows 7 for x64-based Systems
  • Windows 7 for x64-based Systems Service Pack 1
  • Windows Server 2008 R2 for x64-based Systems
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1
  • Windows Server 2008 R2 for Itanium-based Systems
  • Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
  • Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core Installation)
  • Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core Installation)
  • Windows Server 2008 R2 for x64-based Systems (Server Core Installation)
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core Installation)