Microsoft Windows Invalid IGMP Header DoS Vulnerability

BID:514

Info

Microsoft Windows Invalid IGMP Header DoS Vulnerability

Bugtraq ID: 514
Class: Failure to Handle Exceptional Conditions
CVE:
Remote: Yes
Local: Yes
Published: Jul 03 1999 12:00AM
Updated: Jul 03 1999 12:00AM
Credit: This vulnerability was published in the Butraq mailing list by klepto <[email protected]>. Additional commentary and a second exploit was posted by coolio <[email protected]>. Third exploit posted by klepto <[email protected]>. Additional research into
Vulnerable: Microsoft Windows NT Workstation 4.0 SP5
Microsoft Windows NT Workstation 4.0 SP4
Microsoft Windows NT Workstation 4.0 SP3
Microsoft Windows NT Workstation 4.0 SP2
Microsoft Windows NT Workstation 4.0 SP1
Microsoft Windows NT Workstation 4.0
Microsoft Windows NT Terminal Server 4.0 SP4
Microsoft Windows NT Terminal Server 4.0 SP3
Microsoft Windows NT Terminal Server 4.0 SP2
Microsoft Windows NT Terminal Server 4.0 SP1
Microsoft Windows NT Terminal Server 4.0
Microsoft Windows NT Server 4.0 SP5
Microsoft Windows NT Server 4.0 SP4
Microsoft Windows NT Server 4.0 SP3
Microsoft Windows NT Server 4.0 SP2
Microsoft Windows NT Server 4.0 SP1
Microsoft Windows NT Server 4.0
Microsoft Windows NT Enterprise Server 4.0 SP5
Microsoft Windows NT Enterprise Server 4.0 SP4
Microsoft Windows NT Enterprise Server 4.0 SP3
Microsoft Windows NT Enterprise Server 4.0 SP2
Microsoft Windows NT Enterprise Server 4.0 SP1
Microsoft Windows NT Enterprise Server 4.0
Microsoft Windows 98
Microsoft Windows 95
Not Vulnerable:

Discussion

Microsoft Windows Invalid IGMP Header DoS Vulnerability

The Windows 98 and Windows 2000 TCP/IP stacks were not built to reliably tolerate malformed IGMP headers. When one is received, the stack will sometimes fail with unpredictable results ranging from a Blue Screen to instantaneous reboot.

Exploit / POC

Microsoft Windows Invalid IGMP Header DoS Vulnerability

There were three exploits posted to Bugtraq within 48 hours for this. They are all included here, in chronological order.

Solution / Fix

Microsoft Windows Invalid IGMP Header DoS Vulnerability

Solution:
Microsoft has released a series of patches, available at:

Windows 95: Patches are available via Windows Update
Windows 98: http://www.microsoft.com/windows98/downloads/corporate.asp

The following fixes are available:


Microsoft Windows NT Enterprise Server 4.0

Microsoft Windows NT Terminal Server 4.0 SP1

Microsoft Windows NT Enterprise Server 4.0 SP2

Microsoft Windows NT Server 4.0 SP3

Microsoft Windows NT Terminal Server 4.0

Microsoft Windows NT Terminal Server 4.0 SP3

Microsoft Windows NT Enterprise Server 4.0 SP3

Microsoft Windows NT Server 4.0 SP1

Microsoft Windows NT Workstation 4.0 SP5

Microsoft Windows NT Workstation 4.0

Microsoft Windows NT Enterprise Server 4.0 SP4

Microsoft Windows NT Workstation 4.0 SP2

Microsoft Windows NT Server 4.0

Microsoft Windows NT Enterprise Server 4.0 SP5

Microsoft Windows NT Workstation 4.0 SP3

Microsoft Windows NT Workstation 4.0 SP4

Microsoft Windows NT Terminal Server 4.0 SP2

Microsoft Windows NT Terminal Server 4.0 SP4

Microsoft Windows NT Server 4.0 SP5

Microsoft Windows NT Server 4.0 SP2

Microsoft Windows NT Workstation 4.0 SP1

Microsoft Windows NT Enterprise Server 4.0 SP1

Microsoft Windows NT Server 4.0 SP4

References

Microsoft Windows Invalid IGMP Header DoS Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report