← back
CVE-2010-0270

CVE-2010-0270

35Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 48%
from disclosure to weapon3 days
Published on NVDApr 14
1st PoC+3d
exploitation probability
48%top 1% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Transaction Vulnerability."
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.