Denial of Service Vulnerability in Microsoft Windows SMB Implementation
CVE-2010-0022

Currently unrated

Key Information:

Vendor

Microsoft
Status
Windows Server 2008
Windows Xp
Windows Vista
Windows 2003 Server
Vendor
CVE Published:
10 February 2010

What is CVE-2010-0022?

The SMB implementation in various Microsoft Windows operating systems has a flaw that allows an attacker to send specially crafted packets. This results in improper validation of the share and server name fields, leading to a system malfunction or hang. The affected versions include several iterations of Windows, including Windows 7 and Windows Server 2008, highlighting the need for vigilance and timely updates to mitigate potential risks.

References

https://oval.cisecurity.org/repository/search/definition/...
vdb-entrysignaturex_refsource_OVAL
http://www.us-cert.gov/cas/techalerts/TA10-040A.html
third-party-advisoryx_refsource_CERT
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

EPSS Score

79% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2010-0022 : Denial of Service Vulnerability in Microsoft Windows SMB Implementation