CVE Catalog
CVE-1999-1157
MediumExploitation Probability (EPSS)
Very high risk10.93%
95th percentile - higher than 95% of all known CVEs
Summary
Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface.
Risk Assessment
Attackers can exploit this vulnerability to disrupt system operation, leading to loss of availability of network services.
Recommendation
It is recommended to update the system to the latest version or apply patches to mitigate this vulnerability.
Original NVD description (English source)
Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface.