Home / bulletins

MS09-050 - Critical: Vulnerabilities in SMBv2 Could Allow Remote Code Execution (975517) - Version:1.0

Posted on 14 October 2009

Critical

Severity Rating: Critical - Revision Note: V1.0 (October 13, 2009): Bulletin published.Summary: This security update resolves one publicly disclosed and two privately reported vulnerabilities in Server Message Block Version 2 (SMBv2). The most severe of the vulnerabilities could allow remote code execution if an attacker sent a specially crafted SMB packet to a computer running the Server service. Firewall best practices and standard default firewall configurations can help protect networks from attacks that originate from outside the enterprise perimeter. Best practices recommend that systems that are connected to the Internet have a minimal number of ports exposed.

Link

Other versions

• MS09-050 - Version: 1.1
• MS09-050 - Version: 1.0

 

TOP