Some vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.

1) A boundary error in the TCP/IP implementation can be exploited to potentially execute arbitrary code via specially crafted ICMPv6 Router Advertisement packets.

2) A boundary error in the TCP/IP implementation can be exploited to potentially execute arbitrary code via specially crafted ICMPv6 Route Information packets.

Successful exploitation of the vulnerabilities requires that the attacker is on the same physical or virtual network link with the victim.

3) An error in the TCP/IP implementation can be exploited to potentially execute arbitrary code via specially crafted Encapsulating Security Payloads (ESP) over UDP datagram fragments.

Successful exploitation of this vulnerability requires that a custom network driver that splits a received UDP header into multiple MDLs is installed.

4) An error in the TCP/IP implementation can be exploited to hang an affected system via multiple TCP packets containing malformed selective acknowledgment (SACK) values.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
1, 2, 3) The vendor credits Sumit Gwalani, Drew Hintz, and Neel Mehta of Google Security Team.
4) Reported by the vendor.

Original Advisory
Microsoft (KB974145):
http://www.microsoft.com/technet/security/Bulletin/MS10-009.mspx

Deep Links
Links available to Secunia VIM customers