CVE-2010-0270: Input Validation
The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Transaction Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0270?
CVE-2010-0270 is considered a critical vulnerability that can lead to remote code execution or denial of service.
How do I fix CVE-2010-0270?
To fix CVE-2010-0270, apply the latest security updates provided by Microsoft for Windows 7 and Windows Server 2008 R2.
What systems are affected by CVE-2010-0270?
CVE-2010-0270 affects Microsoft Windows 7 and Windows Server 2008 R2.
What kind of attack is possible with CVE-2010-0270?
CVE-2010-0270 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause memory corruption.
Is there a workaround for CVE-2010-0270?
Currently, the recommended approach for CVE-2010-0270 is to apply security patches rather than rely on workarounds.