CVE-2011-0660: The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Win...

Security readout for executives and security teams

This flaw affects legacy Microsoft Windows SMB clients. If a vulnerable machine connects to a hostile or compromised SMB server, that server can send a crafted SMBv1 or SMBv2 response that may run code on the client. The issue is old, but still matters where unsupported Windows systems remain in use. Exposure is most likely in environments still running the listed legacy Windows versions, especially systems that can initiate SMB connections to untrusted networks, file shares, or compromised internal servers. The source bundle does not identify newer Windows versions as affected. Treat this as a legacy-system risk with high impact but source-limited exploitation evidence. Priority should be highest where old Windows hosts still process SMB traffic or can reach untrusted file shares. Mitigation focus: Check Microsoft MS11-019 for the official security update and applicability details.; Prioritize removal or isolation of affected unsupported Windows versions.; Restrict outbound SMB access to trusted servers where operationally feasible..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.