CVE:CVE-2006-2379
CNNVD:CNNVD-200606-283
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
Microsoft Windows的TCP/IP协议驱动处理特定畸形的IP源路由报文时存在缓冲区溢出漏洞，远程攻击者可以通过发送有Loose Source and Record Route选项的特制ICMP报文触发这个漏洞，导致tcpip.sys或ntoskrnl.exe中出现错误而造成拒绝服务或执行任意指令。
默认情况下，Windows系统的路由及远程访问服务是关闭的，也就是说默认情况下系统不受此漏洞影响。
solution:Upgrade microsoft windows_2000 to a higher version than *,*:sp1,*:sp2,*:sp3,*:sp4,and avoid the version *:sp1,*:sp2,*:sp3,*:sp4; Upgrade microsoft windows_2003_server to a higher version than datacenter_64-bit:sp1,enterprise,enterprise:sp1,enterprise_64-bit,enterprise_64-bit:sp1,r2,r2:sp1,standard,standard:sp1,standard_64-bit,web,web:sp1,and avoid the version datacenter_64-bit:sp1,enterprise,enterprise:sp1,enterprise_64-bit,enterprise_64-bit:sp1,r2,r2:sp1,standard,standard:sp1,standard_64-bit,web,web:sp1; Upgrade microsoft windows_nt to a higher version than 4.0,4.0:sp1,4.0:sp2,4.0:sp3,4.0:sp4,4.0:sp5,4.0:sp6,4.0:sp6a,and avoid the version 4.0,4.0:sp1,4.0:sp2,4.0:sp3,4.0:sp4,4.0:sp5,4.0:sp6,4.0:sp6a; Upgrade microsoft windows_xp to a higher version than *,*:gold,*:sp1,*:sp2,and avoid the version *:gold,*:sp1,*:sp2