CVE-2010-0017: Race Condition
First published: Wed Feb 10 2010(Updated: )
Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code, and in the SMB client implementation in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows local users to gain privileges, via a crafted SMB Negotiate response, aka "SMB Client Race Condition Vulnerability."
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows 7 | ||
| Microsoft Windows Server | ||
| Microsoft Windows Server | ||
| Microsoft Windows Server | ||
| Microsoft Windows Server | =sp2 | |
| Microsoft Windows Server | =sp2 | |
| Microsoft Windows Server | =r2 | |
| Microsoft Windows Vista | ||
| Microsoft Windows Vista | =sp1 | |
| Microsoft Windows Vista | =sp2 | |
| Microsoft Windows Vista | ||
| =sp2 | ||
| =sp2 | ||
| =r2 | ||
| =sp1 | ||
| =sp2 | ||
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2010-0017?
CVE-2010-0017 is considered a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2010-0017?
To fix CVE-2010-0017, apply the latest security updates provided by Microsoft for the affected Windows versions.
What software is affected by CVE-2010-0017?
CVE-2010-0017 affects Microsoft Windows Server 2008 R2, Windows 7, Windows Vista, and several service pack versions of these operating systems.
Can CVE-2010-0017 be exploited remotely?
Yes, CVE-2010-0017 can be exploited remotely by attackers through the SMB protocol.
What impact does CVE-2010-0017 have on affected systems?
Exploitation of CVE-2010-0017 can lead to unauthorized remote code execution, compromising system security.
- agent/type
- agent/references
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- agent/weakness
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- agent/author
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/microsoft
- canonical/microsoft windows 7
- canonical/microsoft windows server
- version/microsoft windows server/sp2
- version/microsoft windows server/r2
- canonical/microsoft windows vista
- version/microsoft windows vista/sp1
- version/microsoft windows vista/sp2