CVE-2006-0021
Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a...
Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an invalid IP option, aka the "IGMP v3 DoS Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an invalid IP option, aka the "IGMP v3 DoS Vulnerability."
- Record
CVE-2006-0021- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an invalid IP option, aka the "IGMP v3 DoS Vulnerability."
- Record
CVE-2006-0021- Updated
- 2026-11-02
EUVDEUVD-2006-0029 No score
Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an invalid IP option, aka the "IGMP v3 DoS Vulnerability."
- Record
EUVD-2006-0029- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g367-j7q7-9r56 No score
Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a...
Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an invalid IP option, aka the "IGMP v3 DoS Vulnerability."
- Record
GHSA-g367-j7q7-9r56- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Windows XP/2003 - IGMP v3 Denial of Service (MS06-007) (1) | 2006-03-21 |
| Exploit-DB | Microsoft Windows XP/2003 - IGMP v3 Denial of Service (MS06-007) (2) | 2006-03-22 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0021 is a high vulnerability (CVSS 7.8) in Microsoft Windows Xp, published February 14, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 62.9%, the 99th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1310
vupen.com/english/advisories/2006/0576
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-007
exchange.xforce.ibmcloud.com/vulnerabilities/24489
securityfocus.com/bid/16645
Show 12 moreShow less
kb.cert.org/vuls/id/839284
us-cert.gov/cas/techalerts/TA06-045A.html
securitytracker.com/id?1015629
exploit-db.com/exploits/1599
securiteam.com/exploits/5PP0T0KI0O.html
secunia.com/advisories/18853
nvd.nist.gov/vuln/detail/CVE-2006-0021
github.com/advisories/GHSA-g367-j7q7-9r56