CVE Catalog

CVE-1999-0723

High
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
7.36%

94th percentile - higher than 94% of all known CVEs

Summary

The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads are waiting for user input.

Risk Assessment

An attacker can cause system unavailability, leading to service interruptions and potential financial losses for the organization.

Recommendation

It is recommended to monitor worker threads and implement mechanisms to limit the wait time for user input.

Original NVD description (English source)

The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads are waiting for user input.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS