CVE-2000-0347: Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session reques...

Security readout for executives and security teams

A very old flaw in Windows 95 and Windows 98 lets an attacker on the network crash the machine by sending a specially crafted NetBIOS session request. It only matters if your organization still runs those unsupported operating systems, which should have been retired years ago. Business risk today is minimal for typical modern environments. Exposure is limited to any surviving Windows 95 or Windows 98 hosts that expose NetBIOS session services (TCP 139) reachable by an attacker. Modern networks that have retired these operating systems and blocked NetBIOS at the perimeter have effectively no exposure. Low priority for modern estates. Only relevant if legacy Windows 95/98 systems remain in service; those should be retired or fully isolated regardless of this CVE. Mitigation focus: Inventory and retire remaining Windows 95/98 systems; these OSes are unsupported.; Block inbound NetBIOS/SMB (TCP 139, 445) at network and host firewalls.; Segment any legacy hosts that cannot be retired onto isolated networks..

Prepared

Jul 12, 2026, 01:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.