CVE-2006-5614
Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2, when Internet Connection Sharing is enabled, allows remote attackers to cause a denial of service (svchost.exe crash) via a malformed DNS query, which results in a null pointer…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 79.2%, higher than 100% of all known CVEs. Patch or mitigate before the next change window.
Description
Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2, when Internet Connection Sharing is enabled, allows remote attackers to cause a denial of service (svchost.exe crash) via a malformed DNS query, which results in a null pointer dereference.
- CVSS 2.0
- 2.6 LOWAV:N/AC:H/Au:N/C:N/I:N/A:P
- EPSS
- 79.21% probability · 100th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/windows nt helper components · microsoft/windows xp
- Source
- cve@mitre.org
References
- http://research.eeye.com/html/alerts/zeroday/20061028.html
- http://secunia.com/advisories/22592Vendor Advisory
- http://securitytracker.com/id?1017133
- http://www.osvdb.org/30096
- http://www.securityfocus.com/bid/20804
- http://www.vupen.com/english/advisories/2006/4248
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29917
- https://www.exploit-db.com/exploits/2672
- http://research.eeye.com/html/alerts/zeroday/20061028.html
- http://secunia.com/advisories/22592Vendor Advisory
- http://securitytracker.com/id?1017133
- http://www.osvdb.org/30096
- http://www.securityfocus.com/bid/20804
- http://www.vupen.com/english/advisories/2006/4248
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29917
- https://www.exploit-db.com/exploits/2672
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.