CVE-2010-0270

Related Files

Microsoft SMB Client Kernel Stack Overflow

Posted Apr 16, 2010

Authored by laurent gaffie, Renaud Feil | Site stratsec.net

A vulnerability exists in the SMB client of Microsoft Windows 7 and Windows Server 2008 R2. This vulnerability allows an attacker to trigger a kernel stack overflow by sending a specific "SMB_COM_TRANSACTION2" response. Attacking the SMB client can be achieved by convincing a user to connect to a malicious SMB server. Alternatively, the attacker could attempt man-in-the-middle attacks (such as ARP spoofing, NBNS packet spoofing, etc.) to redirect legitimate SMB connections to a malicious SMB server. Successful exploitation of this issue may result in remote code execution with kernel privileges.

tags | advisory, remote, overflow, kernel, spoof, code execution

systems | windows

advisories | CVE-2010-0270

SHA-256 | 4634330c6b9a740411368733ef3422e5a35456f847e190d753c1af27f8b65e09

Download | Favorite | View