CVE-2009-3675

No fix known EPSS 25%

LSASS.exe in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote authenticated users to cause a denial of service (CPU consumption) via a malformed ISAKMP request over IPsec, aka "Local Security Authority Subsystem Service Resource Exhaustion Vulnerability."

Published 2009-12-09 · CVE record · OSV

Products: microsoft windows_2000, microsoft windows_2003_server, microsoft windows_xp