CVE-2011-0660 The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB serv...
HighCVSS 9.3
EPSS 16.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Response Parsing Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 7 | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
| Microsoft windows 2003 server | All versions | No fix listed |
| Microsoft windows server 2003 | All versions | No fix listed |
| Microsoft windows server 2008 | All versions | No fix listed |
| Microsoft windows vista | All versions | No fix listed |
References
- 71772 vdb-entry
- 47239 vdb-entry
- 1025328 vdb-entry
- TA11-102A third-party-advisory us-government-resource
- ADV-2011-0938 vdb-entry
- MS11-019 vendor-advisory
- oval:org.mitre.oval:def:11995 signature vdb-entry