CVE-2001-1552: Medium severity Microsoft Windows ME vulnerability

Published Dec 31, 2001

Updated

ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple Service Discovery Protocol (SSDP) message. NOTE: multiple replies to the original post state that the problem could not be reproduced.

Affected Software

1 affected component

Microsoft Windows ME

Event History

Dec 31, 2001

CVE Published

05:00 AM

Jul 14, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1552?

The severity of CVE-2001-1552 is considered low as it creates a denial of service condition without widespread impact.

How do I fix CVE-2001-1552?

To fix CVE-2001-1552, ensure that you restrict or block incoming SSDP messages from untrusted sources.

What systems are affected by CVE-2001-1552?

CVE-2001-1552 specifically affects Microsoft Windows Me.

What type of attack does CVE-2001-1552 facilitate?

CVE-2001-1552 facilitates a denial of service attack through malformed Simple Service Discovery Protocol messages.

Is CVE-2001-1552 still a relevant threat today?

CVE-2001-1552 is largely considered obsolete owing to the age of the affected software, but can still be relevant in legacy systems.