CVE-1999-1201: Microsoft Windows 95

Medium severity, CVSS 5.0. EPSS: 13.9% chance of exploitation in the next 30 days.

Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service (traffic amplification) via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing.

Affected products

• Microsoft Windows 95: any version
• Microsoft Windows 98: any version

Published 1999-02-06. Last modified 2026-06-16.