OSVDB ID: 27155 Title: Microsoft Windows Server Service SRV.SYS Crafted Request SMB Information Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
Windows contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when the Server service reuses memory without zeroing it out, which can disclose random information in memory resulting in a loss of confidentiality. |
Classification |
Location:
Remote / Network Access
Attack Type: Information Disclosure Impact: Loss of Confidentiality Solution: Patch / RCS Exploit: Exploit Public, Exploit Unknown Disclosure: OSVDB Verified, Vendor Verified |
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability. |
Products |
|
References |
|
Credit |
|