Microsoft published a Major Revision of MS09-048 to show that Windows XP. Service Pack 2 and Windows XP Service Pack 3* are now Affected Software. The denial of service attacks require a sustained flood of specially crafted TCP packets, and the system will recover once the flood ceases. The company also updated the FAQ: If Windows XP is listed as an affected product, why is Microsoft not issuing an update for it? Microsoft did clarify that CVE-2009-1925, TCP/IP Timestamps Code Execution Vulnerability, does not.”]
Source: https://taosecurity.blogspot.com/2009/09/microsoft-updates-ms09-048-to-show-xp.html