SMB: Microsoft Windows SMB Client Transaction Response Buffer Overflow

A remote code execution vulnerability exists in Microsoft Windows SMB Client. The vulnerability is due to improper validation of certain fields when handling SMB transaction responses. Remote unauthenticated attackers could exploit this vulnerability by enticing a user to connect to a malicious SMB server and sending a specially crafted SMB response to the target machine. Successful exploitation would allow for arbitrary code injection and execution with the privileges of the operating system kernel. Code injection that does not result in execution could crash the target system, and result in a Denial of Service condition.

Extended Description

Microsoft Windows is prone to a remote stack-based buffer-overflow vulnerability. An attacker can exploit this issue to execute code with SYSTEM-level privileges. Failed exploit attempts will likely cause denial-of-service conditions.

Affected Products

Avaya messaging_application_server,Nortel_networks contact_center_manager_server

References

BugTraq: 39339

CVE: CVE-2010-0270

Short Name

SMB:TRANSACTION-RESPONSE-OF

Severity

Critical

Recommended

False

Recommended Action

Drop

SMB: Microsoft Windows SMB Client Transaction Response Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?