Vulners
Lucene search
Microsoft Windows 'HTTP.sys' - Remote Code Execution
| Reporter | Title | Published | Views | Family All 41 |
|---|---|---|---|---|
 | Microsoft Window - HTTP.sys PoC (MS15-034) | 15 Apr 201500:00 | – | zdt |
| Microsoft Window (HTTP.sys) HTTP Request Parsing DoS (MS15-034) | 17 Apr 201500:00 | – | zdt |
| MS15-034 Microsoft IIS Remote Code Execution Exploit | 19 Apr 201500:00 | – | zdt |
 | Exploit for Code Injection in Microsoft | 20 Oct 202511:22 | – | githubexploit |
| Exploit for Code Injection in Microsoft | 20 Jun 201814:28 | – | githubexploit |
| Exploit for Code Injection in Microsoft | 15 Apr 201515:05 | – | githubexploit |
 | Exploit for Code Injection in Microsoft | 27 Nov 202010:59 | – | gitee |
| Exploit for Code Injection in Microsoft | 25 Nov 202023:04 | – | gitee |
| Exploit for Code Injection in Microsoft | 17 Nov 202009:07 | – | gitee |
 | CVE-2015-1635 | 14 Apr 201500:00 | – | attackerkb |
10
| Source | Link |
|---|---|
| exploit-db | www.exploit-db.com/exploits/36773 |
| securitysift | www.securitysift.com/an-analysis-of-ms15-034/ |
| nvd | www.nvd.nist.gov/vuln/detail/CVE-2015-1635 |
| securitytracker | www.securitytracker.com/id/1032109 |
| github | www.github.com/b1gbroth3r/shoMe |
id: CVE-2015-1635
info:
name: Microsoft Windows 'HTTP.sys' - Remote Code Execution
author: Phillipo
severity: critical
description: |
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."
impact: |
Attackers can execute arbitrary code remotely on Windows servers running vulnerable HTTP.sys, potentially leading to complete system compromise and data breach.
remediation: |
Apply Microsoft security update MS15-034 immediately to patch the vulnerability.
reference:
- https://www.exploit-db.com/exploits/36773
- https://www.securitysift.com/an-analysis-of-ms15-034/
- https://nvd.nist.gov/vuln/detail/CVE-2015-1635
- http://www.securitytracker.com/id/1032109
- https://github.com/b1gbroth3r/shoMe
classification:
cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C
cvss-score: 10
cve-id: CVE-2015-1635
cwe-id: CWE-94
epss-score: 0.99999
epss-percentile: 0.99998
cpe: cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
metadata:
verified: true
max-request: 1
vendor: microsoft
product: windows_7
shodan-query:
- '"Microsoft-IIS" "2015"'
- '"microsoft-iis" "2015"'
- cpe:"cpe:2.3:o:microsoft:windows_7"
tags: cve,cve2015,kev,microsoft,iis,rce,vkev,vuln
http:
- method: GET
path:
- "{{BaseURL}}"
headers:
Range: "bytes=0-18446744073709551615"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "HTTP Error 416"
- "The requested range is not satisfiable"
condition: and
- type: word
part: header
words:
- "Microsoft"
# digest: 4a0a00473045022067051878b7269a6a148c74e545f9152664317ee545f6e49e118d7a9456f143da022100ed3ceb902a207c52080619c33ca7c10d40baeb2e394b74e6b8a2aff97d6c321e:922c64590222798bb761d5b6d8e72950Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
04 Feb 2026 07:00Current
9.1High risk
Vulners AI Score9.1
CVSS 210
CVSS 3.19.8
EPSS0.99999
SSVC