7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
6.4 Medium
AI Score
Confidence
Low
0.839 High
EPSS
Percentile
98.5%
Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service (TCP outage) via a series of TCP sessions that have pending data and a (1) small or (2) zero receive window size, and remain in the FIN-WAIT-1 or FIN-WAIT-2 state indefinitely, aka βTCP/IP Orphaned Connections Vulnerability.β
osvdb.org/57797
www.recurity-labs.com/content/pub/Microsoft_Windows_CVE-2009-1926
www.securityfocus.com/archive/1/506331/100/0/threaded
www.securityfocus.com/bid/36269
www.us-cert.gov/cas/techalerts/TA09-251A.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5965