CVE Vulnerabilities

CVE-2009-3676

Published: Nov 13, 2009 | Modified: Oct 30, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.1 HIGH
AV:N/AC:M/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service (infinite loop and system hang) via a (1) SMBv1 or (2) SMBv2 response packet that contains (a) an incorrect length value in a NetBIOS header or (b) an additional length field at the end of this response packet, aka SMB Client Incomplete Response Vulnerability.

Affected Software

Name Vendor Start Version End Version
Windows_7 Microsoft * *
Windows_server_2008 Microsoft r2 (including) r2 (including)

References