MS.SMB.Response.DoS

Alias/esSMB.Response.DoS
Release DateJan 19, 2010
SeverityMedium
ImpactDenial of Service: Remote attackers can crash vulnerable systems.
DescriptionThis indicates an attack attempt against a denial-of-service vulnerability in Samba client.

The vulnerability is caused by improper bounds checking of incoming SMB packets. It may allow remote attackers to execute arbitrary code by sending a specially crafted SMB request to an SMB client. Failed exploit attempts will likely cause the program to crash, resulting in a denial-of-service condition.
Affected ProductsMicrosoft Windows 7
Microsoft Windows Server 2008 R2
Recommended ActionsCurrently we are not aware of any officially supplied patch for this issue.
Common Vulnerabilities and Exposures (CVE)http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-3676
Reference/shttp://g-laurent.blogspot.com/2009/11/windows-7-server-2008r2-remote-kernel.html
http://www.microsoft.com/technet/security/advisory/977544.mspx
http://www.vupen.com/english/advisories/2009/3216
Reference: VID-17942