CVE-2005-0852: Microsoft Windows XP SP1 allows local users to cause a denial of service (system crash) via an empty datagr...

Security readout for executives and security teams

This is a local denial-of-service issue in Microsoft Windows XP SP1. A local user could trigger a system crash by sending an empty datagram through a raw IP-over-IP socket. The source bundle does not provide CVSS, patch details, or evidence of active exploitation. Exposure appears limited to systems still running Microsoft Windows XP SP1 with local users able to create or use raw IP sockets. Modern supported Windows versions are not identified as affected in the provided sources. Treat this as a legacy-risk cleanup item unless Windows XP SP1 remains in production. If present, prioritize retirement or isolation because the impact is a full system crash, but available evidence does not show active exploitation. Mitigation focus: Inventory any remaining Windows XP SP1 systems.; Check Microsoft or vendor guidance for historical patch status.; Retire or isolate unsupported XP SP1 hosts where possible..

Prepared

Jun 29, 2026, 23:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.