The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (hang) by calling the MrxSmbCscIoctlCloseForCopyChunk with the file handle of the shadow device, which results in a deadlock, aka the "SMB Invalid Handle Vulnerability."

Threat-Mapped Scoring

Score: 1.5

Priority: P4 - Informational (Low)

• S10 – Denial of Service

EPSS

Score: 0.00404
Percentile: 0.60098

CVSS Scoring

Mapped CWE(s)

• CWE-667 : Improper Locking

All CAPEC(s)

CAPEC(s) with Mapped TTPs

Mapped ATT&CK TTPs

• T1499.004 : Application or System Exploitation
  Kill Chain: impact

Malware

APTs Threat Group Associations

Campaigns

Affected Products

• cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_2003_server:-:*:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_2003_server:-:*:*:*:*:*:itanium:*
• cpe:2.3:o:microsoft:windows_2003_server:-:*:*:*:*:*:x64:*
• cpe:2.3:o:microsoft:windows_2003_server:-:sp1:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_2003_server:-:sp1:*:*:*:*:itanium:*
• cpe:2.3:o:microsoft:windows_xp:-:*:*:*:professional:*:x64:*
• cpe:2.3:o:microsoft:windows_xp:-:sp1:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*

← Back to Home