CVE-1999-1201

Medium

Published: 06/02/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

13.90%

96th percentile - higher than 96% of all known CVEs

Summary

Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing.

Risk Assessment

Attackers can exploit this vulnerability to amplify network traffic, potentially leading to system overload and service disruption. Organizations may face significant availability issues.

Recommendation

It is recommended to avoid configuring multiple TCP/IP stacks on the same MAC address and to monitor network traffic for potential attacks. Consider upgrading systems to newer versions that are not vulnerable to this issue.

Original NVD description (English source)

Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service (traffic amplification) via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing.