Back

CVE-2006-0021

Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an invalid IP option, aka the "IGMP v3 DoS Vulnerability."

Published: Feb 14, 2006 Modified: Jun 16, 2026
CWE-119

CVSS Metrics

Affected Products (24)

Vendor Product Version
microsoft windows_2003_server datacenter_64-bit
microsoft windows_2003_server enterprise
microsoft windows_2003_server enterprise
microsoft windows_2003_server enterprise_64-bit
microsoft windows_2003_server r2
microsoft windows_2003_server r2
microsoft windows_2003_server r2
microsoft windows_2003_server standard
microsoft windows_2003_server standard
microsoft windows_2003_server standard_64-bit
microsoft windows_2003_server web
microsoft windows_2003_server web
microsoft windows_xp *
microsoft windows_xp *
microsoft windows_xp *
microsoft windows_xp *
microsoft windows_xp *
microsoft windows_xp *
microsoft windows_xp *
microsoft windows_xp *

…and 4 more

GitHub Security Advisory GHSA-g367-j7q7-9r56

Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a...

Risk Scores

CVSS Score 7.8 / 10
EPSS Score 62.88%

Top 1% most likely to be exploited

Threat Score 50.1 / 100

Data Sources

NVD EPSS GitHub