CVE-2009-3676
- State
- Published
- Severity
- Not scored
- Published
- Nov 13, 2009
- Updated
- Aug 7, 2024
- Reserved
- Oct 13, 2009
Description
The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service (infinite loop and system hang) via a (1) SMBv1 or (2) SMBv2 response packet that contains (a) an incorrect length value in a NetBIOS header or (b) an additional length field at the end of this response packet, aka "SMB Client Incomplete Response Vulnerability."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://news.cnet.com/8301-27080_3-10395891-245.html
- 1023179vdb-entry
- http://g-laurent.blogspot.com/2009/11/windows-7-server-2008r2-remote-kernel.html
- oval:org.mitre.oval:def:7186vdb-entrysignature
- http://www.microsoft.com/technet/security/advisory/977544.mspx
- 37347third-party-advisory
- ADV-2009-3216vdb-entry
- MS10-020vendor-advisory
- http://praetorianprefect.com/archives/2009/11/how-to-crash-windows-7-and-server-2008/
- http://secunia.com/blog/66/
- 20091111 Windows 7 , Server 2008R2 Remote Kernel Crashmailing-list
- http://blogs.technet.com/msrc/archive/2009/11/13/microsoft-security-advisory-977544-released.aspx
- TA10-103Athird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.