CVE-2017-0146

Microsoft Windows Vista SP2 da SMBv1 serveri; Windows Server 2008 SP2 va R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold va R2; Windows RT 8.1; va Windows 10 Gold, 1511 va 1607; va Windows Server 2016 masofaviy tajovuzkorlarga o'zboshimchalik bilan kodni ishlab chiqilgan paketlar orqali bajarishga imkon beradi, ya'ni "Windows SMB Remote Code Execution Vulnerability". Bu zaiflik CVE-2017-0143, CVE-2017-0144, CVE-2017-0145 va CVE-2017-0148 da tavsiflanganlardan farq qiladi.

CVSS Vector

Manbalar

• http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html
• http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html
• http://www.securityfocus.com/bid/96707
• http://www.securitytracker.com/id/1037991
• https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf