CVE-2009-2532
EUVD-2009-252714.10.2009, 10:30
Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Multi-Protocol Negotiate Request packet, which allows remote attackers to execute arbitrary code via a crafted SMBv2 packet to the Server service, aka "SMBv2 Command Value Vulnerability."
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| microsoft | windows_server_2008 | * |
| microsoft | windows_server_2008 | * |
| microsoft | windows_server_2008 | * |
| microsoft | windows_server_2008 | - |
| microsoft | windows_server_2008 | - |
| microsoft | windows_server_2008 | - |
| microsoft | windows_server_2008 | - |
| microsoft | windows_server_2008 | - |
| microsoft | windows_vista | * |
| microsoft | windows_vista | * |
| microsoft | windows_vista | * |
| microsoft | windows_vista | * |
| microsoft | windows_vista | - |
| microsoft | windows_vista | - |
𝑥
= Vulnerable software versions
References