CVE-2002-1561

The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference.

Affected products

Windows 2000, Windows Nt 4.0, Windows Xp

Microsoft Windows 2000

All versions

Microsoft Windows 2000 Terminal Services

All versions

Microsoft Windows Nt

= 4.0

Microsoft Windows Xp

All versions

CVSS 2.0

5.0 MEDIUM

EPSS

37.7% (98th percentile)

NVD status

Modified

Published

2003-03-26