This host is missing a critical security update according to Microsoft Bulletin MS11-020.

Successful exploitation could allow remote attackers to execute arbitrary code on the system. Impact Level: System

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://technet.microsoft.com/en-us/security/bulletin/MS11-020

The flaw is due to improper validation of field in SMB request, which allows remote attackers to execute arbitrary code on the system by sending a malformed SMB request.

Microsoft Windows 7 SP1 and prior Microsoft Windows 2008 SP2 and prior Microsoft Windows Vista SP2 and prior Microsoft Windows 2008 R2 SP1 and prior Microsoft Windows XP Service Pack 3 and prior Microsoft Windows 2003 Service Pack 2 and prior

• http://osvdb.org/71781
• http://secunia.com/advisories/44072/
• http://technet.microsoft.com/en-us/security/bulletin/ms11-020
• http://www.securitytracker.com/id?1025329
• http://www.us-cert.gov/cas/techalerts/TA11-102A.html

---

Updated on 2015-03-25