Vulnerability Details : CVE-2012-2551

The server in Kerberos in Microsoft Windows Server 2008 R2 and R2 SP1, and Windows 7 Gold and SP1, allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via a crafted session request, aka "Kerberos NULL Dereference Vulnerability."

Vulnerability category: Memory CorruptionDenial of service

Published 2012-10-09 21:55:03

Updated 2020-09-28 12:58:31

Source Microsoft Corporation

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2012-2551

Probability of exploitation activity in the next 30 days: 53.26%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 97 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2012-2551

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	[email protected]
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

References for CVE-2012-2551

Products affected by CVE-2012-2551

Microsoft » Windows Server 2008 » Update R2 X64 Edition
cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2008 » Update R2 Itanium Edition
cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*
Matching versions
Microsoft » Windows 7 » Update SP1 X64 Edition
cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*
Matching versions
Microsoft » Windows 7 » Update SP1 X86 Edition
cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*
Matching versions
Microsoft » Windows 7 » X86 Edition
cpe:2.3:o:microsoft:windows_7:*:*:x86:*:*:*:*:*
Matching versions
Microsoft » Windows 7 » X64 Edition
cpe:2.3:o:microsoft:windows_7:*:*:x64:*:*:*:*:*
Matching versions