CVE-2009-3676

CVE-2009-3676 is a denial-of-service vulnerability affecting the SMB client in Microsoft Windows 7 and Server 2008 R2. Remote SMB servers or man-in-the-middle attackers can exploit this by sending malformed SMBv1 or SMBv2 response packets, leading to an infinite loop and system hang. With a CVSS score of 7.1, this vulnerability is considered highly severe due to its remote attack vector and complete denial-of-service impact, though it requires medium attack complexity. Despite its age and severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.