Home / bulletins

MS11-043 - Critical : Vulnerability in SMB Client Could Allow Remote Code Execution (2536276) - Version: 2.2

Posted on 09 July 2013

Critical

Severity Rating: Critical
Revision Note: V2.2 (July 9, 2013): Bulletin revised to announce a detection change in the Windows Vista packages for the 2536276 update to correct a Windows Update reoffering issue. This is a detection change only. Customers who have already successfully updated their systems do not need to take any action.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if an attacker sent a specially crafted SMB response to a client-initiated SMB request. To exploit the vulnerability, an attacker must convince the user to initiate an SMB connection to a specially crafted SMB server.

Link

Other versions

 

TOP