CVE-2009-3103

2009-09-0822:30:00

CWE-399

[email protected]

web.nvd.nist.gov

550

cve-2009-3103

array index error

smbv2 protocol

windows

vulnerability

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.4 High

AI Score

Confidence

High

0.973 High

EPSS

Percentile

99.9%

JSON

Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand) character in a Process ID High header field in a NEGOTIATE PROTOCOL REQUEST packet, which triggers an attempted dereference of an out-of-bounds memory location, aka “SMBv2 Negotiation Vulnerability.” NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

microsoftwindows_server_2008

microsoftwindows_server_2008itanium

microsoftwindows_server_2008x32

microsoftwindows_server_2008x64

microsoftwindows_server_2008sp2itanium

microsoftwindows_server_2008Matchsp2x32

microsoftwindows_server_2008Matchsp2x64

microsoftwindows_vista

microsoftwindows_vistasp1

microsoftwindows_vistasp2

CPENameOperatorVersion
microsoft:windows_server_2008microsoft windows server 2008eq*
microsoft:windows_server_2008microsoft windows server 2008eqsp2
microsoft:windows_vistamicrosoft windows vistaeq*

CPE	Name	Operator	Version
microsoft:windows_server_2008	microsoft windows server 2008	eq	*
microsoft:windows_server_2008	microsoft windows server 2008	eq	sp2
microsoft:windows_vista	microsoft windows vista	eq	*