Whats wrong with PPTP?
As the PPTP service establishes sessions, exchanges data, and ends sessions, it periodically needs resources from the operating system. When it’s finished using those resources, it should, by design, return them to the operating system so they can be used by other processes. However, a flaw in the PPTP service prevents it, under certain conditions, from returning all the resources it uses. Specifically, if the service receives a particular type of invalid PPTP packet, it will request some memory but won’t return it to the operating system when it’s done. Each time the service receives such a packet, it depletes the available memory on the system. If enough packets of this type were received and processed, it could deplete the memory to the point where the machine might “hang”, and simply become unresponsive, or might fail altogether. What could an attacker do via this vulnerability? If an attacker generated a large number of the packets at issue here and sent them to an affected server
