$ cve CVE-2005-0048 JSON

CVE-2005-0048 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 38.6% (pctl 99)

Patch early

A public exploit exists.

Description

Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the "IP Validation Vulnerability."

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	38.6% — more likely to be exploited than 99% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2005-05-02
Last modified	2026-06-16

Affected (2)

Vendor	Product
microsoft	windows 2000
microsoft	windows xp

Public exploits

Source	Title	Date
exploit-db	Microsoft Windows - Malformed IP Options Denial of Service (MS05-019)	2005-04-17
exploit-db	Microsoft Windows XP/2000 - Internet Protocol Validation Remote Code Execution (2)	2005-04-16
exploit-db	Microsoft Windows XP/2000 - Internet Protocol Validation Remote Code Execution (1)	2005-04-12

References

→ the Explorer · watch your stack · NVD