(MS14-006) Vulnerability in IPv6 Could Allow Denial of Service (2904659)

  Severity: HIGH
  CVE Identifier: CVE-2014-0254
  Advisory Date: FEB 19, 2014

  DESCRIPTION

This update addresses a denial of service vulnerability in the IPv6 implementation of TCP/IP in several Windows operating systems. An attacker must be in the same subnetwork as the victim. If successfully exploited, the attacker can issue denial of service to the target system, causing the system to be inaccessible.

  SOLUTION

  AFFECTED SOFTWARE AND VERSION

  • Windows 8 for x64-based Systems
  • Windows 8 for 32-bit Systems
  • Windows Server 2012
  • Windows RT
  • Windows Server 2012 (Server Core installation)