CVE-1999-1127

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Dec 31, 1999
Updated: Feb 8, 2024
CWE ID 772

Summary

CVE-1999-1127 is a vulnerability affecting Windows NT 4.0 systems. It arises from the operating system's failure to properly terminate invalid named pipe Remote Procedure Call (RPC) connections. An attacker can exploit this issue by establishing a series of malformed named pipe RPC connections, resulting in a denial of service condition due to resource exhaustion. This vulnerability, also known as "Named Pipes Over RPC," poses a significant threat by allowing remote opponents to cause system instability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Windows NT

Affected Vendors

  • Microsoft