OSVDB ID: 66976

Title: Microsoft Windows SMB Server Compounded Request Handling Stack Exhaustion Remote DoS

Info

Disclosure
Aug 10, 2010

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Aug 10, 2010

Description

 Microsoft Windows contains a flaw that may allow a denial of service. The issue is triggered when an error when handling Server Message Block (SMB) version 2 compounded requests can be exploited via a specially crafted SMB packet. It can cause a system running the Server service to stop responding.

Classification

 Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Solution: Patch / RCS
Disclosure: Vendor Verified

Solution

 Microsoft has released a patch to address this vulnerability.

Products

Microsoft Corporation

Windows

 XP Professional
2008 Server
Vista
7
XP Home Edition

Windows Server 2003

 SP0

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/66976