VYPR
Unrated severityNVD Advisory· Published Jul 23, 1999· Updated Apr 16, 2026

CVE-1999-0224

CVE-1999-0224

Description

A long username in the Windows NT messenger service can cause a denial of service, crashing the system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

A long username in the Windows NT messenger service can cause a denial of service, crashing the system.

Vulnerability

The Windows NT messenger service is vulnerable to a denial of service when it processes a username that is excessively long. This vulnerability affects Windows NT and potentially Windows 95 systems.

Exploitation

An attacker can crash a vulnerable Windows NT or Windows 95 system by sending a Winpopup message with an extremely long username. This can be achieved remotely, for example, from a UNIX system using the smbclient utility with a crafted username [1].

Impact

Successful exploitation of this vulnerability results in a denial of service, causing the affected system to crash.

Mitigation

No specific patch information or fixed version is available in the provided references. Users are advised to disable the messenger service if it is not required. Further mitigation details are not yet disclosed in the available references.

AI Insight generated on Jun 5, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

6
  • cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.