MS.SMB.Remote.Code.Execution

Release Date Feb 10, 2010
Severity high
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a heap-based buffer-overflow vulnerability in Samba client. By sending a specially crafted SMB response to the SMB client, a remote attacker could overflow a buffer and execute arbitrary code on a vulnerable system.
Affected Products Windows Server 2008 Windows 7 Windows Server 2008 R2
Recommended Actions Apply the patch, available from the vendor's web site: http://update.microsoft.com
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2010-0016
Reference/s http://www.microsoft.com/technet/security/Bulletin/MS10-006.mspx (MS-ID)

Fortinet