Secunia

Some vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.

1) Errors in the kernel's TCP/IP implementation (tcpip.sys) when handling IGMPv3 and MLDv2 queries can be exploited to cause a buffer overflow and crash the system or potentially execute arbitrary code via a specially crafted IGMPv3 or MLDv2 packet sequence.

NOTE: This vulnerability does not affect systems running Windows 2000.

2) An error in the kernel's TCP/IP implementation (tcpip.sys) when handling fragmented router advertisement ICMP queries can be exploited to cause the system to stop responding via a specially crafted ICMP query.

Successful exploitation requires that Router Discovery Protocol (RDP) is enabled (disabled by default).

NOTE: This vulnerability does not affect systems running Windows Vista.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Alex Wheeler and Ryan Smith, IBM Internet Security Systems X-Force.

Changelog
Further details available in Customer Area

Original Advisory
MS08-001 (KB941644):
http://www.microsoft.com/technet/security/Bulletin/MS08-001.mspx

IBM X-Force:
http://www.iss.net/threats/282.html

Other references
Further details available in Customer Area

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area