SMB: Invalid Buffer Size

This signature detects attempts to exploit a known vulnerability in the Microsoft SMB layer. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the kernel.

Extended Description

Microsoft Windows is prone to a remote code-execution vulnerability that occurs in the SMB (Server Message Block) protocol implementation. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will facilitate in the complete compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

Nortel_networks self-service_mps_1000,Microsoft windows_server_2008_for_itanium-based_systems

References

CVE: CVE-2008-4834

Short Name

SMB:OF:SMB-INVALID-BUFFER

Severity

Critical

Recommended

False

Recommended Action

Drop

SMB: Invalid Buffer Size

Extended Description

Affected Products

References

Found a potential security threat?