PT-2010-1845 · Microsoft · Server Message Block (Smb) Protocol+1

Joshua Morin · Published 2010-02-10 · Updated 2023-12-07 · CVE-2010-0020

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description The issue arises from the improper validation of request fields in the SMB implementation, allowing remote authenticated users to execute arbitrary code via a malformed request. An authenticated remote code execution issue exists in the way Microsoft Server Message Block (SMB) Protocol software handles specially crafted SMB packets. An attacker could exploit this by sending a specially crafted network message to a system running the Server service as an authenticated user. Successful exploitation could result in complete control of the affected system, although it will most probably cause a Denial of Service condition.

Recommendations For Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

DoS

Code Injection

Weakness Enumeration

CWE-20

CWE-94

Related Identifiers

CVE-2010-0020

Affected Products

Server Message Block (Smb) Protocol

Windows

References · 6

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-012 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0020 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0020 · Security Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-012 · Note
• http://us-cert.gov/cas/techalerts/TA10-040A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8438 · Note