$ cve CVE-2004-0790 JSON

CVE-2004-0790 EXPLOIT

5.0

MEDIUM · CVSS 2.0 · EPSS 80.1% (pctl 100)

Patch early

A public exploit exists.

Description

Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.

Scoring

CVSS	5.0 (MEDIUM, v2.0)
Vector	AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS	80.1% — more likely to be exploited than 100% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2005-04-12
Last modified	2026-06-16

Affected (8)

Vendor	Product
microsoft	windows 2000
microsoft	windows 2003 server
microsoft	windows 98
microsoft	windows 98se
microsoft	windows me
microsoft	windows xp
sun	solaris
sun	sunos

Public exploits

Source	Title	Date
exploit-db	Multiple OS (Win32/Aix/Cisco) - Crafted ICMP Messages Denial of Service (MS05-019)	2005-04-20
exploit-db	Microsoft Windows - Malformed IP Options Denial of Service (MS05-019)	2005-04-17
exploit-db	Multiple Vendor ICMP Message Handling - Denial of Service	2005-04-12

References

→ the Explorer · watch your stack · NVD