CVE-1999-1254: Microsoft Windows 95

Medium severity, CVSS 5.0. EPSS: 13.3% chance of exploitation in the next 30 days.

Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables.

Affected products

• Microsoft Windows 95: any version
• Microsoft Windows 98: any version
• Microsoft Windows Nt: any version

Published 1999-03-08. Last modified 2026-06-16.