CVE-2002-1712: Microsoft Windows 2000

Medium severity, CVSS 5.0. EPSS: 25.8% chance of exploitation in the next 30 days.

Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port (TCP/139), as demonstrated by stream3.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows Nt: version 4.0 only

Published 2002-12-31. Last modified 2026-06-16.