{"cvss":0.0,"datePublished":"2017-06-20T00:00:00Z","dateUpdated":"2017-06-20T00:00:00Z","description":"Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand) character in a Process ID High header field in a NEGOTIATE PROTOCOL REQUEST packet, which triggers an attempted dereference of an out-of-bounds memory location, aka \"SMBv2 Negotiation Vulnerability.\" NOTE: some of these details are obtained from third party information.","dueDate":"","id":"CVE-2009-3103","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Known","product":"Windows","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"Microsoft Windows SMBv2 srv2.sys Remote Code Execution","vendor":"Microsoft"}