CVE-2010-0017

Related Files

Microsoft Windows 7 / Server 2008 R2 SMB Client Infinite Loop

Posted Aug 31, 2024

Authored by H D Moore, laurent gaffie | Site metasploit.com

This Metasploit module exploits a denial of service flaw in the Microsoft Windows SMB client on Windows 7 and Windows Server 2008 R2. To trigger this bug, run this module as a service and forces a vulnerable client to access the IP of this system as an SMB server. This can be accomplished by embedding a UNC path (\\HOST\share\something) into a web page if the target is using Internet Explorer, or a Word document otherwise.

tags | exploit, web, denial of service

systems | windows, 7

advisories | CVE-2010-0017

SHA-256 | 9beedad3e3c3103e0197e08fdbc451bf1f5445929f6c5022c987a0616228427c

Download | Favorite | View

Microsoft SMB Client Pool Overflow

Posted Feb 10, 2010

Authored by laurent gaffie, Renaud Feil | Site stratsec.net

A vulnerability exists in the Microsoft SMB client which allows an attacker to trigger a kernel pool memory corruption by sending a specific 'Negotiate Protocol' response.

tags | advisory, kernel, protocol

advisories | CVE-2010-0016, CVE-2010-0017

SHA-256 | dd4096a3adf7c94d29852abe073cbc999aa234b0784a145cc1d0c9ce5a2c7733

Download | Favorite | View