CVE-2009-3103 : 상세 정보

Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand) character in a Process ID High header field in a NEGOTIATE PROTOCOL REQUEST packet, which triggers an attempted dereference of an out-of-bounds memory location, aka "SMBv2 Negotiation Vulnerability." NOTE: some of these details are obtained from third party information.

관련 약점

메트릭

EPSS

EPSS 점수

EPSS 백분위수

익스플로잇 정보

Exploit Database EDB-ID : 12524

게시일 : 2010-05-06 22h00 +00:00
저자 : Jelmer de Hen
EDB 검증됨 : Yes

Exploit Database EDB-ID : 10005

게시일 : 2009-11-10 23h00 +00:00
저자 : laurent gaffie
EDB 검증됨 : Yes

Exploit Database EDB-ID : 9594

게시일 : 2009-09-08 22h00 +00:00
저자 : laurent gaffie
EDB 검증됨 : Yes

Exploit Database EDB-ID : 40280

게시일 : 2016-02-25 23h00 +00:00
저자 : ohnozzy
EDB 검증됨 : No

Exploit Database EDB-ID : 14674

게시일 : 2010-08-16 22h00 +00:00
저자 : Piotr Bania
EDB 검증됨 : No

Exploit Database EDB-ID : 16363

게시일 : 2010-07-02 22h00 +00:00
저자 : Metasploit
EDB 검증됨 : Yes

언급된 제품

구성 0

Microsoft>>Windows_server_2008 >> Version *

Microsoft>>Windows_server_2008 >> Version *

Microsoft>>Windows_server_2008 >> Version *

Microsoft>>Windows_server_2008 >> Version *

Microsoft>>Windows_server_2008 >> Version *

Microsoft>>Windows_server_2008 >> Version sp2

Microsoft>>Windows_server_2008 >> Version sp2

Microsoft>>Windows_vista >> Version *

Microsoft>>Windows_vista >> Version *

Microsoft>>Windows_vista >> Version *

참고 자료