MS09-050

MS09-050 — SMBv2 远程代码执行漏洞利用 CVE-2009-3103 漏洞详情 Windows Vista 和 Server 2008 引入了 SMBv2，并带来了一个新的内核驱动程序 srv2.sys。该驱动程序未能验证 SMB 协商请求中的 Process Id High 字段。通过在该字段中发送一个特制的值，攻击者可使 srv2.sys 使用受控的值索引函数指针表，从而解引用攻击者提供的地址。 其结果是内核上下文中的任意代码执行，且无需身份验证。攻击者只需能够访问 445 端口。 微软于 2009 年 10 月修复了此漏洞（KB975517）。任何未打补丁的 Vist...

Exploit for CVE-2009-3103

MS09-050 — SMBv2 Remote Code Execution Exploit CVE-2009-310...

Out-of-bounds

Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service system crash via an & ampersand character in a Proces...

CVE-2009-3103

Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service system crash via an & ampersand character in a Proces...

PT-2009-1117

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to a fixed version Description The issue is related to an array index error in the SMBv2 protocol implementation, allowing remote attackers to execute arbitrary code or cause a denial of service via a specially...