CVE-2009-3103
9.4 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.973 High
EPSS
Percentile
99.8%
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand) character in a Process ID High header field in a NEGOTIATE PROTOCOL REQUEST packet, which triggers an attempted dereference of an out-of-bounds memory location, aka βSMBv2 Negotiation Vulnerability.β NOTE: some of these details are obtained from third party information.
References
archives.neohapsis.com/archives/fulldisclosure/2009-09/0090.html
blog.48bits.com/?p=510
g-laurent.blogspot.com/2009/09/windows-vista7-smb20-negotiate-protocol.html
isc.sans.org/diary.html?storyid=7093
osvdb.org/57799
secunia.com/advisories/36623
www.exploit-db.com/exploits/9594
www.kb.cert.org/vuls/id/135940
www.microsoft.com/technet/security/advisory/975497.mspx
www.reversemode.com/index.php?option=com_content&task=view&id=64&Itemid=1
www.securityfocus.com/archive/1/506300/100/0/threaded
www.securityfocus.com/archive/1/506327/100/0/threaded
www.securityfocus.com/bid/36299
www.securitytracker.com/id?1022848
www.us-cert.gov/cas/techalerts/TA09-286A.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-050
exchange.xforce.ibmcloud.com/vulnerabilities/53090
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6489
Social References
More
Related
9.4 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.973 High
EPSS
Percentile
99.8%