Alert: Microsoft Security Bulletin MS06-007 - Vulnerability in TCP/IP Could Allow Denial of Service (913446)

Microsoft Security Bulletin MS06-007:
Vulnerability in TCP/IP Could Allow Denial of Service (913446)

Bulletin URL:
<http://www.microsoft.com/technet/security/Bulletin/MS06-007.mspx>

Version Number: 1.0
Issued Date: Tuesday, February 14, 2006
Impact of Vulnerability: Denial of Service
Maximum Severity Rating: Important
Patch(es) Replaced: This bulletin replaces a prior security update. See
the frequently asked questions (FAQ) section of this bulletin for the
complete list.
Caveats: None

Tested Software:
Affected Software:
------------------
* Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service
Pack 2
<http://tinyurl.com/clqsx>
* Microsoft Windows XP Professional x64 Edition
<http://tinyurl.com/87ues>
* Microsoft Windows Server 2003 and Microsoft Windows Server 2003
Service Pack 1
<http://tinyurl.com/ax96u>
* Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft
Windows Server 2003 with SP1 for Itanium-based Systems
<http://tinyurl.com/dhwoy>
* Microsoft Windows Server 2003 x64 Edition Note The security updates
for Microsoft Windows Server 2003, Microsoft Windows Server 2003 Service
Pack 1, and Microsoft Windows Server 2003 x64 Edition also apply to
Microsoft Windows Server 2003 R2. Windows Server 2003 (all versions)
<http://tinyurl.com/7qbxb>

Technical Description:
----------------------
* IGMP v3 DoS Vulnerability - CVE-2006-0021: A denial of service
vulnerability exists that could allow an attacker to send a specially
crafted IGMP packet to an affected system. An attacker could cause the
affected system to stop responding.

This email is sent to NTBugtraq automagically as a service to my
subscribers. (v4.01.2194.14842)

Cheers,
Russ Cooper - Senior Scientist - Cybertrust/NTBugtraq Editor

--
NTBugtraq Editor's Note:

Most viruses these days use spoofed email addresses. As such, using an Anti-Virus product which automatically notifies the perceived sender of a message it believes is infected may well cause more harm than good. Someone who did not actually send you a virus may receive the notification and scramble their support staff to find an infection which never existed in the first place. Suggest such notifications be disabled by whomever is responsible for your AV, or at least that the idea is considered.
--