NVD

Id
49775  
Name
CVE-2009-2532  
Description
Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Multi-Protocol Negotiate Request packet, which allows remote attackers to execute arbitrary code via a crafted SMBv2 packet to the Server service, aka "SMBv2 Command Value Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-10-14  
Modified Date
2010-08-21  
Seq
2009-2532  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
251682 49775 CVE-2009-2532 oval:org.mitre.oval:def:6336  View
251683 49775 CVE-2009-2532 MS09-050  View
251684 49775 CVE-2009-2532 TA09-286A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41216 JVNDB-2009-002223 Microsoft Windows における SMB Multi-Protocol Negotiate Request パケット処理に関する任意のコードを実行される脆弱性 Microsoft Windows には、SMB Multi-Protocol Negotiate Request パケットのコマンド値を適切に処理しないため、任意のコードを実行される脆弱性が存在します。 CVE-2009-2532 39963 CVE-2009-2532 49775 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002223.html 2009-10-13 2009-11-16 View