CVE-2006-5614 describes a denial-of-service vulnerability in Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2 when Internet Connection Sharing is enabled. A remote attacker can exploit this by sending a malformed DNS query, leading to a svchost.exe crash due to a null pointer dereference. The vulnerability has a low CVSS score of 2.6, indicating a partial availability impact with high attack complexity, but its FAUCET Risk Score is 99/100 and EPSS is notably high. While not listed on the KEV catalog, public exploit code exists, including Metasploit modules and ExploitDB entries, though there is no evidence of active exploitation or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:a:microsoft:windows_nt_helper_components:*:*:*:*:*:*:*:* | ||
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:H/Au:N/C:N/I:N/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.3 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.