CVE-2011-1268: Input Validation
The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Response Parsing Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1268?
CVE-2011-1268 is rated as critical due to its potential for remote code execution.
How do I fix CVE-2011-1268?
To fix CVE-2011-1268, apply the security updates provided by Microsoft as specified in their bulletin.
What software versions are affected by CVE-2011-1268?
CVE-2011-1268 affects multiple versions including Windows XP, Windows Vista, Windows 7, Windows Server 2003, and Windows Server 2008.
Can CVE-2011-1268 be exploited remotely?
Yes, CVE-2011-1268 can be exploited remotely by sending a crafted SMB response to the vulnerable system.
What types of attacks can CVE-2011-1268 facilitate?
CVE-2011-1268 can facilitate arbitrary code execution attacks, allowing an attacker to take control of the affected system.