CVE-2009-3103: Critical severity microsoft windows server vulnerability
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand) character in a Process ID High header field in a NEGOTIATE PROTOCOL REQUEST packet, which triggers an attempted dereference of an out-of-bounds memory location, aka "SMBv2 Negotiation Vulnerability." NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3103?
CVE-2009-3103 has a critical severity level as it allows remote attackers to execute arbitrary code or cause a denial of service.
How do I fix CVE-2009-3103?
To fix CVE-2009-3103, you should apply the latest security updates provided by Microsoft for affected versions of Windows.
Which versions of Windows are affected by CVE-2009-3103?
CVE-2009-3103 affects Microsoft Windows Vista, Windows Server 2008, and Windows 7 RC across various service packs.
What is the impact of CVE-2009-3103?
The impact of CVE-2009-3103 includes the potential for system crashes or unauthorized remote code execution.
Is there a workaround for CVE-2009-3103 while waiting for a patch?
There are no officially recommended workarounds for CVE-2009-3103, so applying patches is the best solution.