CVE-2010-2550

critical

Published 2010-08-11 · Modified 2026-04-29

💬 Discuss on Community ✚ Propose mitigation

CVSS v3

—

CVSS v4 NEW

—

not yet in upstream

VIR risk

10.0

Description

The SMB Server in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate fields in an SMB request, which allows remote attackers to execute arbitrary code via a crafted SMB packet, aka "SMB Pool Overflow Vulnerability."

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Exploits

Public proof-of-concept code below. AS-IS, for defenders and authorised testing only.

Exploit-DB

EDB-14607 dos windows verified

laurent gaffie · 2010-08-10

Microsoft - SMB Server Trans2 Zero Size Pool Alloc (MS10-054)

Source code queued for fetch — refresh in a moment.

Metasploit modules

auxiliary_dos/windows/smb/ms10_054_queryfs_pool_overflow rank 300

Microsoft Windows SRV.SYS SrvSmbQueryFsInformation Pool Overflow DoS

Source fetch failed: fetch_error — view the original via the link above.

OS impact

Windows Affected 2 releases

Version	Status	Fixed in
-	Affected	—
—	Affected	—

References

CWEs

CWE-20

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.