EDB-14674

PoC

Microsoft Windows - 'srv2.sys' SMB Negotiate ProcessID Function Table Dereference (MS09-050)

view exploit source exploit_dbtype remoteauthor Piotr Baniapublished 2010-08-17catalog exploit_db

exploited CVEs (3)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2009-2532US	high10.0	62.2% (99th)	Exploit	2009-10-14
Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Multi-Protocol Negotiate Request…
CVE-2009-2526US	high7.8	81.9% (100th)	Exploit	2009-10-14
Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remote attackers to cause a denial of service…
CVE-2009-3103US	high10.0	92.3% (100th)	Exploit	2009-09-08
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote a…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.