In computer security, WinNuke is an example of a Nuke remote denial-of-service attack (DoS) exploit that affected the Microsoft Windows 3.1x, Windows NT 3x, Windows 95 and Windows NT 4 computer operating systems. The exploit sent a string of Out-of-band data (OOB data) to the target computer on TCP port 139 (NetBIOS), causing it to lock up and display a Blue Screen of Death (BSOD). This does not damage or change the data on the computer's hard disk, but any unsaved data would be lost. This exploit has been patched with the release of Windows Socket 2 update for Windows 95 and Service Pack 3 fo
In computer security, WinNuke is an example of a Nuke remote denial-of-service attack (DoS) exploit that affected the Microsoft Windows 3.1x, Windows NT 3x, Windows 95 and Windows NT 4 computer operating systems. The exploit sent a string of Out-of-band data (OOB data) to the target computer on TCP port 139 (NetBIOS), causing it to lock up and display a Blue Screen of Death (BSOD). This does not damage or change the data on the computer's hard disk, but any unsaved data would be lost. This exploit has been patched with the release of Windows Socket 2 update for Windows 95 and Service Pack 3 for Windows NT 4. Windows 98 RC0, Windows 2000 and newer operating systems are not vulnerable to this exploit. In 2002, a second incarnation of the similar exploit that utilized Network Share Provider appeared, was identified by Microsoft in 2004 and was patched subsequently. Windows Vista and newer Microsoft Operating Systems are immune to both of these exploits.
==Details== The so-called OOB simply means that the malicious TCP packet contained an Urgent pointer (URG). The "Urgent pointer" is a rarely used field in the TCP header, used to indicate that some of the data in the TCP stream should be processed quickly by the recipient. Affected operating systems did not handle the Urgent pointer field correctly.
Discovered by embedding cosine similarity (sentence-transformers MiniLM, 384-dim).