CVE-2011-0661
high · 10The SMB Server service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate fields in SMB requests, which allows remote attackers to execute arbitrary code via a malformed request in a (1) SMBv1 or (2) SMBv2 packet, aka "SMB Transaction Parsing Vulnerability."
10
CVSS
44.6%
EPSS (exploit prob.)
99th
EPSS percentile
2011-04-13
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | windows_2003_server | all versions |
| microsoft | windows_7 | all versions |
| microsoft | windows_7 | all versions |
| microsoft | windows_7 | all versions |
| microsoft | windows_server_2003 | all versions |
| microsoft | windows_server_2008 | all versions |
| microsoft | windows_server_2008 | all versions |
| microsoft | windows_server_2008 | all versions |
| microsoft | windows_server_2008 | all versions |
| microsoft | windows_server_2008 | all versions |
| microsoft | windows_server_2008 | all versions |
| microsoft | windows_server_2008 | r2 |
| microsoft | windows_server_2008 | r2 |
| microsoft | windows_vista | all versions |
| microsoft | windows_vista | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://osvdb.org/71781
- http://secunia.com/advisories/44072
- http://www.securityfocus.com/bid/47198
- http://www.securitytracker.com/id?1025329
- http://www.us-cert.gov/cas/techalerts/TA11-102A.html
- http://www.vupen.com/english/advisories/2011/0939
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-020
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12076
- http://osvdb.org/71781
- http://secunia.com/advisories/44072
- http://www.securityfocus.com/bid/47198
- http://www.securitytracker.com/id?1025329
- http://www.us-cert.gov/cas/techalerts/TA11-102A.html
- http://www.vupen.com/english/advisories/2011/0939
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-020
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12076
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2011-0661