CVE-2009-3103 : Detail

Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand) character in a Process ID High header field in a NEGOTIATE PROTOCOL REQUEST packet, which triggers an attempted dereference of an out-of-bounds memory location, aka "SMBv2 Negotiation Vulnerability." NOTE: some of these details are obtained from third party information.

Kelemahan Terkait

Metrik

EPSS

Skor EPSS

Persentil EPSS

Informasi eksploitasi

Exploit Database EDB-ID : 12524

Tanggal publikasi : 2010-05-06 22h00 +00:00
Penulis : Jelmer de Hen
Terverifikasi EDB : Yes

Exploit Database EDB-ID : 10005

Tanggal publikasi : 2009-11-10 23h00 +00:00
Penulis : laurent gaffie
Terverifikasi EDB : Yes

Exploit Database EDB-ID : 9594

Tanggal publikasi : 2009-09-08 22h00 +00:00
Penulis : laurent gaffie
Terverifikasi EDB : Yes

Exploit Database EDB-ID : 40280

Tanggal publikasi : 2016-02-25 23h00 +00:00
Penulis : ohnozzy
Terverifikasi EDB : No

Exploit Database EDB-ID : 14674

Tanggal publikasi : 2010-08-16 22h00 +00:00
Penulis : Piotr Bania
Terverifikasi EDB : No

Exploit Database EDB-ID : 16363

Tanggal publikasi : 2010-07-02 22h00 +00:00
Penulis : Metasploit
Terverifikasi EDB : Yes

Produk yang Disebutkan

Konfigurasi 0

Microsoft>>Windows_server_2008 >> Version *

Microsoft>>Windows_server_2008 >> Version *

Microsoft>>Windows_server_2008 >> Version *

Microsoft>>Windows_server_2008 >> Version *

Microsoft>>Windows_server_2008 >> Version *

Microsoft>>Windows_server_2008 >> Version sp2

Microsoft>>Windows_server_2008 >> Version sp2

Microsoft>>Windows_vista >> Version *

Microsoft>>Windows_vista >> Version *

Microsoft>>Windows_vista >> Version *

Referensi