PT-2010-4100 · Microsoft · Windows Server 2008+3

Joshua Morin + 3 · Published 2010-08-11 · Updated 2023-12-07 · CVE-2010-2552

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 Microsoft Windows 7 (affected versions not specified)

Description A denial of service issue exists due to the way the Server Message Block (SMB) Protocol software handles specially crafted SMB compounded requests. This can be exploited by sending a specially crafted network message to a computer running the Server service, allowing remote attackers to cause a system hang. No authentication is required for an attacker to exploit this issue.

Recommendations For Microsoft Windows Vista versions SP1 through SP2, apply the recommended patch to resolve the issue. For Microsoft Windows Server 2008 versions Gold through R2, apply the recommended patch to resolve the issue. For Microsoft Windows 7, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2010-2552

Affected Products

Windows

Windows 7

Windows Server 2008

Windows Vista

References · 6

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2552 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-2552 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-054 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12072 · Note
• http://us-cert.gov/cas/techalerts/TA10-222A.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-054 · Note