Design/Logic Flaw

The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted 1 SMBv1 or 2 SMBv2 response, aka "SMB Client Response...

CVE-2011-0660

The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted 1 SMBv1 or 2 SMBv2 response, aka "SMB Client Response...

Microsoft SMB Client Remote Code Execution Vulnerabilities (2511455)

This host is missing a critical security update according to Microsoft Bulletin MS11-019. OpenVAS Vulnerability Test $Id: secpodms11-019.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft SMB Client Remote Code Execution Vulnerabilities 2511455 Authors: Veerendra GG Copyright: Copyright c 2011...

CVE-2011-0660: Improper Input Validation

The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted 1 SMBv1 or 2 SMBv2 response, aka "SMB Client Response...

MS11-019: Vulnerabilities in SMB Client Could Allow Remote Code Execution (2511455)

The version of the SMB client software installed on the remote Windows host may be affected by multiple vulnerabilities which could allow an attacker to execute arbitrary code on the remote host subject to the privileges of the user running the affected software. C Tenable Network Security, Inc...

Microsoft SMB Client Remote Code Execution Vulnerabilities (2511455)

This host is missing a critical security update according to Microsoft Bulletin MS11-019. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS11-019: Vulnerabilities in SMB Client could allow remote code execution: April 12, 2011

None None...

Microsoft Windows SMB Client Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that affects the SMB client. Successful exploits can allow attackers to execute arbitrary code with full user rights. Successfully exploiting this issue will result in the complete compromise of affected computers...

Microsoft Windows Media Player DVR-MS File Code Execution

Added: 03/14/2011 CVE: CVE-2011-0042 BID: 46680 OSVDB: 71016 Background Windows Media Player is an audio and video media player for Windows platforms. Problem A file parsing error in Windows Media Player allows command execution when a user opens a specially crafted Digital Video Recording DVR-MS...

Windows 7/2008R2 SMB Client Trans2 Stack Overflow

import sys,SocketServer EBP = "\x42\x42\x42\x42" EIP = "\x41\x41\x41\x41" packetnego = "\x00\x00\x00\x55" "\xff\x53\x4d\x42\x72\x00\x00\x00\x00\x98\x53\xc8\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xfe\x00\x00\x00\x00"...

Microsoft Windows SMB客户端消息大小解析远程代码执行漏洞（MS10-020）

BUGTRAQ ID: 39340 CVE ID: CVE-2010-0477 Microsoft Windows是微软发布的非常流行的操作系统。 在解析特制的SMB响应时，Microsoft SMB客户端实现中处理响应消息大小的方式中存在内存破坏漏洞。未经认证攻击者可以通过向客户端发起的SMB请求返回特制的SMB响应来利用该漏洞。成功利用此漏洞的攻击者可执行任意代码，并可完全控制受影响的系统。 Microsoft Windows Server 2008 R2 Microsoft Windows 7 临时解决方法： 在防火墙阻断TCP 139和445端口。 厂商补丁： Microsoft...

MS10-006 SMB Client-Side Bug Proof Of Concept

More Info: http://g-laurent.blogspot.com/2010/04/turning-smb-client-bug-to-server-side.html import sys,SocketServer,socket,threading,time,random from random import from time import sleep from socket import if lensys.argv=2: sys.exit'Usage: pwn.py Yourip Broadcastip\n\r Example: pwn.py 10.0.0.1...

Microsoft Windows 7/2008 R2 - SMB Client Trans2 Stack Overflow (MS10-020) (PoC)

import sys,SocketServer Windows 7/2008R2 SMB Client Trans2 stack overflow MS10-020 Date: 17/04/10 Author: Laurent Gaffié Tested on: Windows 7/2008R2 CVE: CVE-2010-0270 Full advisory: http://seclists.org/fulldisclosure/2010/Apr/201 More information:...

MS10-006 SMB Client-Side Bug PoC

Exploit for windows platform in category dos / poc ================================================= Proof of Concept for MS10-006 SMB Client-Side Bug ================================================= More Info: http://g-laurent.blogspot.com/2010/04/turning-smb-client-bug-to-server-side.html impo...

Microsoft Windows - SMB Client-Side Bug (PoC) (MS10-006)

Microsoft Windows - SMB Client-Side Bug PoC MS10-006 More Info: http://g-laurent.blogspot.com/2010/04/turning-smb-client-bug-to-server-side.html import sys,SocketServer,socket,threading,time,random from random import from time import sleep from socket import if lensys.argv=2: sys.exit'Usage: pwn....

Microsoft Windows - SMB Client-Side Bug (PoC) (MS10-006)

More Info: http://g-laurent.blogspot.com/2010/04/turning-smb-client-bug-to-server-side.html import sys,SocketServer,socket,threading,time,random from random import from time import sleep from socket import if lensys.argv=2: sys.exit'Usage: pwn.py Yourip Broadcastip\n\r Example: pwn.py 10.0.0.1...

Microsoft Windows 7 / Server 2008 R2 SMB Client Infinite Loop

This module exploits a denial of service flaw in the Microsoft Windows SMB client on Windows 7 and Windows Server 2008 R2. To trigger this bug, run this module as a service and forces a vulnerable client to access the IP of this system as an SMB server. This can be accomplished by embedding a UNC...

Microsoft SMB client multiple security vulnerabilities

Memory corruptions, race conditions...

Microsoft Security Bulletin MS10-020 - Critical Vulnerabilities in SMB Client Could Allow Remote Code Execution (980232)

Microsoft Security Bulletin MS10-020 - Critical Vulnerabilities in SMB Client Could Allow Remote Code Execution 980232 Published: April 13, 2010 Version: 1.0 General Information Executive Summary This security update resolves one publicly disclosed and several privately reported vulnerabilities i...

CVE-2010-0477

The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle 1 SMBv1 and 2 SMBv2 response packets, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted packet that causes the client to read the entirety of the respons...