CVE-2005-0048: Microsoft Windows 2000

High severity, CVSS 7.5. EPSS: 38.6% chance of exploitation in the next 30 days.

Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the "IP Validation Vulnerability."

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows XP: any version

Published 2005-05-02. Last modified 2026-06-16.