CVE-2009-3103：详情

Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand) character in a Process ID High header field in a NEGOTIATE PROTOCOL REQUEST packet, which triggers an attempted dereference of an out-of-bounds memory location, aka "SMBv2 Negotiation Vulnerability." NOTE: some of these details are obtained from third party information.

相关弱点

指标

EPSS

EPSS 评分

EPSS 百分位

漏洞利用信息

Exploit Database EDB-ID : 12524

发布日期 : 2010-05-06 22h00 +00:00
作者 : Jelmer de Hen
EDB 已验证 : Yes

Exploit Database EDB-ID : 10005

发布日期 : 2009-11-10 23h00 +00:00
作者 : laurent gaffie
EDB 已验证 : Yes

Exploit Database EDB-ID : 9594

发布日期 : 2009-09-08 22h00 +00:00
作者 : laurent gaffie
EDB 已验证 : Yes

Exploit Database EDB-ID : 40280

发布日期 : 2016-02-25 23h00 +00:00
作者 : ohnozzy
EDB 已验证 : No

Exploit Database EDB-ID : 14674

发布日期 : 2010-08-16 22h00 +00:00
作者 : Piotr Bania
EDB 已验证 : No

Exploit Database EDB-ID : 16363

发布日期 : 2010-07-02 22h00 +00:00
作者 : Metasploit
EDB 已验证 : Yes

相关产品

配置 0

Microsoft>>Windows_server_2008 >> Version *

Microsoft>>Windows_server_2008 >> Version *

Microsoft>>Windows_server_2008 >> Version *

Microsoft>>Windows_server_2008 >> Version *

Microsoft>>Windows_server_2008 >> Version *

Microsoft>>Windows_server_2008 >> Version sp2

Microsoft>>Windows_server_2008 >> Version sp2

Microsoft>>Windows_vista >> Version *

Microsoft>>Windows_vista >> Version *

Microsoft>>Windows_vista >> Version *

参考资料