10

CVE-2010-0477

EPSS 81.69%
Published 14.04.2010 16:00:01
Last modified 11.04.2025 00:51:21
Source secure@microsoft.com
Teams watchlist Login
Open Login

The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1) SMBv1 and (2) SMBv2 response packets, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted packet that causes the client to read the entirety of the response, and then improperly interact with the Winsock Kernel (WSK), aka "SMB Client Message Size Vulnerability."

Affected products Warnungen 0 Metrics 2 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Windows 7

Microsoft ≫ Windows 7 Version-

Microsoft ≫ Windows Server 2008 Updater2 Editionitanium

Microsoft ≫ Windows Server 2008 Updater2 Editionx64

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	81.69%	0.991

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://www.us-cert.gov/cas/techalerts/TA10-103A.html

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-020

http://secunia.com/advisories/39372

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6859

https://nvd.nist.gov/vuln/detail/CVE-2010-0477

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-0477

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-0477

EUVD