Microsoft Windows 7
32-bit
Microsoft Windows 7 x64
Microsoft Windows Server 2008 R2 x64
Microsoft Windows Server 2008 R2 Itanium
Type:
Remote
Identifiers:
CVE-2010-0477
Synopsis
Microsoft
SMB client is prone to message size vulnerability. This vulnerability
exists in the way that the Microsoft Server Message Block (SMB) client
implementation handles specially crafted SMB responses.
The vulnerability exists because the Microsoft
Server Message Block (SMB) client implementation improperly handles
specially crafted SMB responses that cause the SMB client to consume
the entire response and indicate an invalid value to the Winsock kernel.
An attempt to exploit the vulnerability would not require
authentication, allowing an attacker to exploit the vulnerability by
sending a specially crafted SMB response to a client-initiated SMB
request.
An attacker who successfully exploited this vulnerability could take
complete control of an affected system. An attacker could then install
programs, view, change, delete data, or create new accounts with full
user rights.
