Description
Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast (PGM) packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted PGM packet, aka the "PGM Invalid Length Vulnerability."
References (7)
Scores
EPSS
0.5059
EPSS Percentile
97.9%
Details
CWE
CWE-1284
Status
published
Products (2)
microsoft/windows_server_2003
(2 CPE variants)
microsoft/windows_xp
(2 CPE variants)
Published
Jun 12, 2008
Tracked Since
Feb 18, 2026