CVE-2011-0660: Input Validation
The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Response Parsing Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0660?
CVE-2011-0660 has a critical severity rating due to the potential for remote code execution.
How do I fix CVE-2011-0660?
To fix CVE-2011-0660, ensure that you apply the latest security updates provided by Microsoft for affected Windows versions.
Which Microsoft Windows versions are affected by CVE-2011-0660?
CVE-2011-0660 affects Microsoft Windows XP SP2 and SP3, Windows Vista SP1 and SP2, Windows 7 SP1, and various versions of Windows Server.
What kind of attacks can exploit CVE-2011-0660?
CVE-2011-0660 can be exploited through crafted SMB responses from remote servers, potentially leading to arbitrary code execution on the client.
Is there a workaround for CVE-2011-0660 while awaiting a patch?
While a patch is the best solution, temporarily disabling SMBv1 can be a workaround to mitigate the risks associated with CVE-2011-0660.