oval:org.mitre.oval:def:1847

Definition Id: oval:org.mitre.oval:def:1847

Oval ID:	oval:org.mitre.oval:def:1847
Title:	SMB Code Execution Vulnerability (Server 2003 / 64-bit XP)
Description:	The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the "Server Message Block Vulnerability," and as demonstrated using Trans2 FIND_FIRST2 responses with large file name length fields.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2005-0045	Version:	2
Platform(s):	Microsoft Windows Server 2003	Product(s):	SMB (Server Message Block)
Definition Synopsis:
the version of mrxsmb.sys is less than 5.2.3790.252 AND NOT the patch KB885250 is installed AND Windows Server 2003 32-bit OR 64-bit OR Windows XP 64-bit Version 2003 is installed Windows Server 2003 or Windows XP 64-Bit Edition Version 2003 Windows Server 2003 is installed OR Windows XP 64-bit Windows XP is installed AND 64-Bit version of Windows is installed OR Microsoft Windows Server 2003 64-Bit Edition Windows Server 2003 is installed AND 64-Bit version of Windows is installed