The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted response, aka "SMB Client Pool Corruption Vulnerability."
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2010-02-10 18:30
Updated : 2024-02-28 11:41
NVD link : CVE-2010-0016
Mitre link : CVE-2010-0016
CVE.ORG link : CVE-2010-0016
JSON object : View
Products Affected
microsoft
- windows_server_2003
- windows_2000
- windows_xp
CWE
CWE-20
Improper Input Validation