Which TCP/IP header field is involved in the Ping of Death exploit?

• A. TCP header field
• B. IP header field
• C. UDP header field
• D. ICMP header field

Answer: (D)

The Ping of Death is an ICMP-based attack. It works by sending ICMP Echo Request messages whose payload is oversized, or fragmented in a way that causes the target’s IP stack to mishandle the reassembly. Because the vulnerability lies in how ICMP Echo data is carried and processed, the header field involved is the ICMP header. In other words, the manipulation happens within the ICMP message (type, code, and the Echo data), not within TCP or UDP headers. Modern systems are largely patched against this, but the concept centers on ICMP, not the IP, TCP, or UDP headers.