CVE Catalog

CVE-1999-1254

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
13.34%

96th percentile - higher than 96% of all known CVEs

Summary

Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables.

Risk Assessment

Attackers can disrupt network communication, potentially leading to loss of access to network resources and decreased system performance.

Recommendation

It is recommended to implement ICMP filtering on routers and to upgrade operating systems to newer versions that are not vulnerable to this issue.

Original NVD description (English source)

Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS