CVE-2005-0048 Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP...
HighCVSS 7.5
EPSS 38.6%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the "IP Validation Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- VU#233754 patch third-party-advisory us-government-resource
- TA05-102A patch third-party-advisory us-government-resource
- 20050412 Windows IP Options Remote Compromise third-party-advisory vendor-advisory
- MS05-019 vendor-advisory
- oval:org.mitre.oval:def:1744 signature vdb-entry
- oval:org.mitre.oval:def:3824 signature vdb-entry
- oval:org.mitre.oval:def:4549 signature vdb-entry