Joshua Morin

A denial of service issue exists due to the way the Server Message Block (SMB) Protocol software handles specially crafted SMB compounded requests. This can be exploited by sending a specially crafted network message to a computer running the Server service, allowing remote attackers to cause a system hang. No authentication is required for an attacker to exploit this issue.

The issue arises from the improper validation of request fields in the SMB implementation, allowing remote authenticated users to execute arbitrary code via a malformed request. An authenticated remote code execution issue exists in the way Microsoft Server Message Block (SMB) Protocol software handles specially crafted SMB packets. An attacker could exploit this by sending a specially crafted network message to a system running the Server service as an authenticated user. Successful exploitation could result in complete control of the affected system, although it will most probably cause a Denial of Service condition.

A buffer underflow issue exists in the Server Message Block (SMB) protocol, allowing remote attackers to execute arbitrary code via a crafted filename in an SMB request. The vulnerability can be exploited when the share type is a disk, which by default requires authentication. Successful exploitation could allow an attacker to install programs, view, change, or delete data, or create new accounts with full user rights.

A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the `emailAddress` parameter in a Send New Password action.