MS09-050

MS09-050 — Exploit de Ejecución Remota de Código en SMBv2 CVE-2009-3103 La Vulnerabilidad Windows Vista y Server 2008 introdujeron SMBv2 con un nuevo controlador de kernel, srv2.sys. Este controlador no valida el campo Process Id High en las solicitudes de negociación SMB. Al enviar un valor...

Out-of-bounds

Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service system crash via an & ampersand character in a Proces...

CVE-2009-3103

Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service system crash via an & ampersand character in a Proces...

PT-2009-1117

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to a fixed version Description The issue is related to an array index error in the SMBv2 protocol implementation, allowing remote attackers to execute arbitrary code or cause a denial of service via a specially...