10

CVE-2011-0661

The SMB Server service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate fields in SMB requests, which allows remote attackers to execute arbitrary code via a malformed request in a (1) SMBv1 or (2) SMBv2 packet, aka "SMB Transaction Parsing Vulnerability."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Windows 7 Version -
Microsoft ≫ Windows 7 Version - Update sp1 Edition x64
Microsoft ≫ Windows 7 Version - Update sp1 Edition x86
Microsoft ≫ Windows Server 2008 Edition itanium
Microsoft ≫ Windows Server 2008 Edition x32
Microsoft ≫ Windows Server 2008 Edition x64
Microsoft ≫ Windows Server 2008 Update sp2 Edition x32
Microsoft ≫ Windows Server 2008 Update sp2 Edition x64
Microsoft ≫ Windows Server 2008 Version - Update sp2 Edition itanium
Microsoft ≫ Windows Server 2008 Version r2 Edition itanium
Microsoft ≫ Windows Server 2008 Version r2 Edition x64
Microsoft ≫ Windows Vista Update sp1
Microsoft ≫ Windows Vista Update sp2
Microsoft ≫ Windows Xp Update sp3
Microsoft ≫ Windows Xp Version - Update sp2 Edition x64
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 44.58% 0.986
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.us-cert.gov/cas/techalerts/TA11-102A.html
US Government Resource
http://osvdb.org/71781
http://secunia.com/advisories/44072
http://www.securityfocus.com/bid/47198
http://www.securitytracker.com/id?1025329
http://www.vupen.com/english/advisories/2011/0939
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-020
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12076