Vulnerability in Microsoft Windows 98
CVE-2001-0877
Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via (1) a spoofed SSDP advertisement that causes the client to connect to a service on another machine that generates a large amount of traffic (e.g., chargen), or (2) via a spoofed SSDP announcement to broadcast or multicast addresses, which could cause all UPnP clients to send traffic to a single target system.
EPSS: 0.438 (98.6th percentile) — read the EPSS interpretation.
Affected products
Public proof-of-concept exploits
References
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (government-resource, x_refsource_CIAC, third-party-advisory)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (mailing-list, x_refsource_NTBUGTRAQ)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (US Government Resource, Patch, Third Party Advisory, x_refsource_CERT, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_MS, vendor-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2001-0877?
- CVE-2001-0877 is a vulnerability in Microsoft Windows 98. Published 2001-12-20.
- Is CVE-2001-0877 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.