CVE-2017-8461

🗓️ 15 Jun 2017 20:00:00Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 333 Views🌐 WEB

Windows RPC Remote Code Execution Vulnerability in XP/Server 2003

Reporter	Title	Published	Views	Family All 19
0day.today	Microsoft Windows RRAS Service MIBEntryGet Overflow Exploit	8 Mar 202100:00	–	zdt
Circl	CVE-2017-8461	5 Mar 202110:08	–	circl
CNVD	Microsoft Windows Remote Code Execution Vulnerability (CNVD-2017-12781)	15 Jun 201700:00	–	cnvd
Cvelist	CVE-2017-8461	15 Jun 201720:00	–	cvelist
EUVD	EUVD-2017-17411	7 Oct 202500:30	–	euvd
Huawei	Security Advisory - Multiple Vulnerabilities Released on Microsoft Security Advisory 4025685	16 Jun 201700:00	–	huawei
Kaspersky	KLA11056 Multiple arbitrary code execution vulnerabilities in Microsoft Windows	15 Jun 201700:00	–	kaspersky
Metasploit	Microsoft Windows RRAS Service MIBEntryGet Overflow	5 Mar 202117:41	–	metasploit
NVD	CVE-2017-8461	15 Jun 201720:29	–	nvd
OpenVAS	Huawei Data Communication: Multiple Vulnerabilities Released on Microsoft security advisory 4025685 (huawei-sa-20170909-01-windows)	5 Jun 202000:00	–	openvas

NVD

Node

microsoft windows_server_2003Match-

microsoft windows_xpMatch-

[
  {
    "product": "Microsoft Windows",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Windows XP SP3, Windows XP x64 SP2, Windows Server 2003 SP2"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/161672/Microsoft-Windows-RRAS-Service-MIBEntryGet-Overflow.html
securitytracker	www.securitytracker.com/id/1038701
support	www.support.microsoft.com/en-us/help/4024323/security-update-of-windows-xp-and-windows-server-2003
securityfocus	www.securityfocus.com/bid/99012

Parameter	Position	Path	Description	CWE
dwVarId	path	\\PIPE\\browser	Overflow in RRAS MIBEntryGet triggered via RRAS DCERPC over SMB named pipe (SMBPIPE) allowing remote code execution.	119
dwMibInEntrySize	path	\\PIPE\\browser	Overflow in RRAS MIBEntryGet triggered via RRAS DCERPC over SMB named pipe (SMBPIPE) allowing remote code execution.	119
dwMibOutEntrySize	path	\\PIPE\\browser	Overflow in RRAS MIBEntryGet triggered via RRAS DCERPC over SMB named pipe (SMBPIPE) allowing remote code execution.	119
MIB_OPAQUE_QUERY	path	\\PIPE\\browser	Overflow in RRAS MIBEntryGet triggered via RRAS DCERPC over SMB named pipe (SMBPIPE) allowing remote code execution.	119
IP_ADDRTABLE	path	\\PIPE\\browser	Overflow in RRAS MIBEntryGet triggered via RRAS DCERPC over SMB named pipe (SMBPIPE) allowing remote code execution.	119
MIB_OPAQUE_INFO	path	\\PIPE\\browser	Overflow in RRAS MIBEntryGet triggered via RRAS DCERPC over SMB named pipe (SMBPIPE) allowing remote code execution.	119
RMIBEntryGet	path	\\PIPE\\browser	Overflow in RRAS MIBEntryGet triggered via RRAS DCERPC over SMB named pipe (SMBPIPE) allowing remote code execution.	119

13 May 2026 00:24Current

7.7High risk

Vulners AI Score7.7

CVSS 26.9

CVSS 3.17.8

EPSS0.08421