0
I guess this is not vulnerable to:
padding oracle attack because it is basically counter mode
stream cipher attack, because it isn't just simply XOR-d
malleability, because XOR-ing something on the ciphertext changes the entire plaintext
A significant disadvantage is that it needs a new key...