10

CVE-2010-0477

EPSS 81.69%
Veröffentlicht 14.04.2010 16:00:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secure@microsoft.com
Teams Watchlist Login
Unerledigt Login

The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1) SMBv1 and (2) SMBv2 response packets, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted packet that causes the client to read the entirety of the response, and then improperly interact with the Winsock Kernel (WSK), aka "SMB Client Message Size Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Windows 7

Microsoft ≫ Windows 7 Version-

Microsoft ≫ Windows Server 2008 Updater2 Editionitanium

Microsoft ≫ Windows Server 2008 Updater2 Editionx64

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	81.69%	0.991

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://www.us-cert.gov/cas/techalerts/TA10-103A.html

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-020

http://secunia.com/advisories/39372

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6859

https://nvd.nist.gov/vuln/detail/CVE-2010-0477

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-0477

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-0477

EUVD