Microsoft Windows 7
32-bit
Microsoft Windows 7 x64
Microsoft Windows Server 2008 R2 x64
Microsoft Windows Server 2008 R2 Itanium
Type:
Remote
Identifiers:
CVE-2010-0270
Synopsis
Microsoft SMB
client is prone to Transaction vulnerability. This vulnerability exists
in the way that the Microsoft Server Message Block (SMB) client
implementation handles specially crafted SMB transaction responses.
The
vulnerability exists because by the Microsoft Server Message Block
(SMB) client improperly validates fields in the SMB response. This
could lead to a memory corruption issue resulting in code execution
with system-level privileges.
An attempt to exploit the vulnerability would not require
authentication, allowing an attacker to exploit the vulnerability by
sending a specially crafted SMB response to a client-initiated SMB
request.
An attacker who successfully exploited this vulnerability could take
complete control of an affected system. An attacker could then install
programs, view, change, delete data, or create new accounts with full
user rights.
