CVE-2008-1440

The record

Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast (PGM) packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted PGM packet, aka the "PGM Invalid Length Vulnerability."

Affected packages

Related vulnerabilities

• CVE-2026-105754 vLLM is an inference and serving engine for large language models. CWE-1284
• CVE-2026-103484 IVFFlat index build in pgvector before 0.8.7 allows a database user to write data… CWE-1284
• CVE-2026-75806 Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be… CWE-1284
• CVE-2026-93749 source-map-js through 1.2.1 fails to validate the per-section offset line value in… CWE-1284
• CVE-2026-87962 t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in… CWE-1284
• CVE-2026-87735 An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. CWE-1284
• CVE-2026-87470 Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36… CWE-1284
• CVE-2026-79376 An issue in the l2cap_handle_data() function of Bestechnic Co., Ltd BES2300 Bluetooth… CWE-1284