PT-2010-2067 · Microsoft · Windows Server 2008 R2+3
Laurent Gaffiã©
·
Published
2010-04-14
·
Updated
2018-10-30
·
CVE-2010-0270
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft Windows Server 2008 R2
Microsoft Windows 7
Description
The issue arises from the improper validation of fields in SMB transaction responses by the SMB client, allowing remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service. This can result in memory corruption and system reboot. The vulnerability can be exploited via crafted SMBv1 or SMBv2 responses. An unauthenticated remote code execution vulnerability exists in the Microsoft Server Message Block (SMB) client implementation, enabling an attacker to send a specially crafted SMB response to a client-initiated SMB request and potentially take complete control of the system.
Recommendations
For Microsoft Windows Server 2008 R2, apply the necessary patch to fix the SMB Client Transaction Vulnerability.
For Microsoft Windows 7, apply the necessary patch to fix the SMB Client Transaction Vulnerability.
As a temporary workaround, consider restricting SMB traffic to minimize the risk of exploitation.
Exploit
Fix
DoS
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Windows 7
Windows Server 2008 R2
Smb
Windows