CVE-2010-0477: Critical severity Microsoft Windows 7 vulnerability
The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1) SMBv1 and (2) SMBv2 response packets, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted packet that causes the client to read the entirety of the response, and then improperly interact with the Winsock Kernel (WSK), aka "SMB Client Message Size Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0477?
CVE-2010-0477 has a severity rating of critical due to its potential for remote code execution.
How do I fix CVE-2010-0477?
To fix CVE-2010-0477, apply the latest security updates from Microsoft for Windows 7 and Windows Server 2008 R2.
What systems are affected by CVE-2010-0477?
CVE-2010-0477 affects Microsoft Windows 7 and Windows Server 2008 R2 operating systems.
What are the potential impacts of CVE-2010-0477?
The potential impacts of CVE-2010-0477 include remote code execution by an attacker through crafted SMB response packets.
Can CVE-2010-0477 be exploited locally?
CVE-2010-0477 is primarily a remote exploitation vulnerability, requiring an attacker to be on the same network or have network access to the target system.