CVE-2010-0812

medium · 6.4

Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to bypass intended IPv4 source-address restrictions via a mismatched IPv6 source address in a tunneled ISATAP packet, aka "ISATAP IPv6 Source Address Spoofing Vulnerability."

6.4

CVSS

17.5%

EPSS (exploit prob.)

97th

EPSS percentile

2010-04-14

Published

AV:N/AC:L/Au:N/C:P/I:P/A:N

Weaknesses

CWE-264

Affected products

Vendor	Product	Affected versions
microsoft	windows_xp	all versions
microsoft	windows_xp	all versions
microsoft	windows_xp	all versions
microsoft	windows_2003_server	all versions
microsoft	windows_2003_server	all versions
microsoft	windows_server_2003	all versions
microsoft	windows_server_2008	all versions
microsoft	windows_server_2008	all versions
microsoft	windows_server_2008	all versions
microsoft	windows_server_2008	all versions
microsoft	windows_server_2008	all versions
microsoft	windows_server_2008	all versions
microsoft	windows_vista	all versions
microsoft	windows_vista	all versions
microsoft	windows_vista	all versions
microsoft	windows_vista	all versions
microsoft	windows_vista	all versions
microsoft	windows_vista	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-0812