Fragmented IGMP Packet Vulnerability

A vulnerability exists in the TCP/IP stack implementations of Microsoft® Windows® 95, Windows 98® and Windows NT® 4.0. Fragmented IGMP packets can cause a variety of problems up to and including causing the machine to crash.

Issue

By sending fragmented IGMP packets to a Windows 95, 98 or Windows NT 4.0 machine, it is possible to disrupt the normal operation of the machine. This vulnerability primarily affects Windows 95 and 98 machines. Depending on a variety of factors, sending such packets to a Windows 95 or 98 machine may elicit behavior ranging from slow performance to crashing.

Windows NT contains the same vulnerability, but other system mechanisms compensate and make it much more difficult to mount a successful attack.

Affected Products

• Windows 95, 98 and NT 4.0

Solution

A patch is available from either Windows Update or from the locations below:

• Windows 95:
  http://www.microsoft.com/windows95/downloads/contents/WUCritical/vip386/Default.asp
• Windows 98:
  http://www.microsoft.com/windows98/downloads/contents/WUCritical/VIP386/Default1.asp
• Windows NT Workstation 4.0; Windows NT Server 4.0; Windows NT Server, Enterprise Edition:
  ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP5/IGMP-fix/
• Windows NT Server 4.0, Terminal Server Edition:
  ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40TSE/hotfixes-postSP4/IGMP-fix/

Further Details

Source: Microsoft Corporation

Reference: Microsoft Corporation

Updated: September 9, 1999

>> Recommended Download - secure your PC from spyware, adware and malware now with Spyware Doctor <<