NVD

Id
50318  
Name
CVE-2009-3103  
Description
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand) character in a Process ID High header field in a NEGOTIATE PROTOCOL REQUEST packet, which triggers an attempted dereference of an out-of-bounds memory location, aka "SMBv2 Negotiation Vulnerability." NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-09-08  
Modified Date
2011-06-24  
Seq
2009-3103  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
254734 50318 CVE-2009-3103 20090907 Windows Vista/7 : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remote B.S.O.D.  View
254735 50318 CVE-2009-3103 http://blog.48bits.com/?p=510  View
254736 50318 CVE-2009-3103 http://g-laurent.blogspot.com/2009/09/windows-vista7-smb20-negotiate-protocol.html  View
254737 50318 CVE-2009-3103 http://isc.sans.org/diary.html?storyid=7093  View
254738 50318 CVE-2009-3103 oval:org.mitre.oval:def:6489  View
254739 50318 CVE-2009-3103 VU#135940  View
254740 50318 CVE-2009-3103 http://www.microsoft.com/technet/security/advisory/975497.mspx  View
254741 50318 CVE-2009-3103 MS09-050  View
254742 50318 CVE-2009-3103 9594  View
254743 50318 CVE-2009-3103 http://www.reversemode.com/index.php?option=com_content&task=view&id=64&Itemid=1  View
254744 50318 CVE-2009-3103 20090908 Regarding Microsoft srv2.sys SMB2.0 NEGOTIATE BSOD  View
254745 50318 CVE-2009-3103 20090909 SMB SRV2.SYS Denial of Service PoC  View
254746 50318 CVE-2009-3103 36299  View
254747 50318 CVE-2009-3103 1022848  View
254748 50318 CVE-2009-3103 TA09-286A  View
254749 50318 CVE-2009-3103 win-srv2sys-code-execution(53090)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41087 JVNDB-2009-002094 Windows SMB version 2 に脆弱性 Microsoft Windows Vista および Server 2008 には、Server Message Block version 2 (SMBv2) メッセージの解析に起因する脆弱性が存在します。 CVE-2009-3103 40534 CVE-2009-3103 50318 7.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002094.html 2009-09-11 2009-10-14 View