This host is missing a critical security update according to Microsoft Bulletin MS08-001.

Successful exploitation could allow remote attackers to execute arbitrary code with SYSTEM-level privileges. Successful exploitation will allow an attacker to compromise the affected system. Impact Level: System/Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://www.microsoft.com/technet/security/bulletin/ms08-001.mspx

The flaws are due to an errors in the kernel's TCP/IP implementation, - when handling 'IGMPv3' and 'MLDv2' queries can be exploited to cause a buffer overflow. - when handling fragmented router advertisement ICMP queries.

Microsoft Windows XP Service Pack 2 and prior. Microsoft Windows 2000 Service Pack 4 and prior. Microsoft Windows 2K3 Service Pack 2 and prior. Microsoft Windows Vista

• http://secunia.com/advisories/28297
• http://securitytracker.com/alerts/2008/Jan/1019166.html
• http://xforce.iss.net/xforce/xfdb/39452
• http://xforce.iss.net/xforce/xfdb/39453

---

Updated on 2015-03-25