The SMB client implementation in Microsoft Windows 2000 SP4 XP SP2 and SP3 and Server 2003 SP2 does not properly validate response fields which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted response aka \SMB Client Pool Corruption Vulnerability.\