CVE-2006-5614

Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2, when Internet Connection Sharing is enabled, allows remote attackers to cause a denial of service (svchost.exe crash) via a malformed DNS query, which results in a null pointer dereference.

Score

CVSS 2.0 2.6 Low

Status

Modified - cve@mitre.org

Published

2006-10-31

Last modified

2024-08-07

Affected products

• Windows Nt Helper Components (Microsoft)
• Windows Xp (Microsoft)

References

• http://research.eeye.com/html/alerts/zeroday/20061028.html
• http://secunia.com/advisories/22592
• http://securitytracker.com/id?1017133
• http://www.osvdb.org/30096
• http://www.securityfocus.com/bid/20804
• http://www.vupen.com/english/advisories/2006/4248
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29917
• https://www.exploit-db.com/exploits/2672