Skip to main content
← All vulnerabilities
CVE-2006-2374

The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows loc

Published
Last modified
published
Not listed in CISA KEV
2 on Exploit-DB

Summary

The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (hang) by calling the MrxSmbCscIoctlCloseForCopyChunk with the file handle of the shadow device, which results in a deadlock, aka the "SMB Invalid Handle Vulnerability."

Timeline

  1. Public exploit on Exploit-DB

    EDB-28001, EDB-1911

  2. CVE published
  3. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 16

securitytracker.com

oval.cisecurity.org

exchange.xforce.ibmcloud.com

vupen.com

idefense.com

docs.microsoft.com

secunia.com

osvdb.org

securityfocus.com

Exploit-DB