CVE-2010-0017

Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code, and in the SMB client implementation in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows local users to gain privileges, via a crafted SMB Negotiate response, aka "SMB Client Race Condition Vulnerability."

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

30.88% chance of exploitation in the next 30 days, 98th percentile

Published

2010-02-10

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/smb/ms10_006_negoti…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/12258

References

• CVE Record
• NVD entry

Related

• CVE-2010-0013
• CVE-2010-0027
• CVE-2010-0002
• CVE-2010-0028
• CVE-2010-0033
• CVE-2010-0049