Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2017-8558
HistoryJun 29, 2017 - 1:29 p.m.

CVE-2017-8558

2017-06-2913:29:00
CWE-119
[email protected]
web.nvd.nist.gov
1

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.075

Percentile

94.2%

JSON

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703 does not properly scan a specially crafted file leading to memory corruption. aka “Microsoft Malware Protection Engine Remote Code Execution Vulnerability”.

Affected configurations

Nvd
Node
microsoftwindows_defenderMatch-
AND
microsoftwindows_10Match-x86
OR
microsoftwindows_10Match1511x86
OR
microsoftwindows_10Match1607x86
OR
microsoftwindows_10Match1703x86
OR
microsoftwindows_7Match-sp1x86
OR
microsoftwindows_8.1Match-x86
OR
microsoftwindows_server_2008Match-sp2x86
Node
microsoftendpoint_protectionMatch-
OR
microsoftforefront_endpoint_protectionMatch-
OR
microsoftforefront_endpoint_protectionMatch2010
OR
microsoftsecurity_essentialsMatch-
OR
microsoftwindows_intune_endpoint_protectionMatch-

Related

zdt 1
threatpost 1
mscve 1
kaspersky 2
cve 1
checkpoint_advisories 1
prion 1
cvelist 1
openvas 2
nessus 1
zdt
zdt
Microsoft MsMpEng - mpengine x86 Emulator Heap Corruption in VFS API Exploit
2017-06-28 00:00:00
threatpost
threatpost
Another RCE Vulnerability Patched in Microsoft Malware Protection Engine
2017-06-26 13:54:53
mscve
mscve
Microsoft Malware Protection Engine Remote Code Execution Vulnerability
2017-06-23 07:00:00
kaspersky
kaspersky
KLA11057 Arbitrary code execution vulnerability in Microsoft Malware Protection Engine
2017-06-23 00:00:00
KLA11843 ACE vulnerability in Microsoft System Center
2017-06-23 00:00:00
cve
cve
CVE-2017-8558
2017-06-29 13:29:00
checkpoint_advisories
checkpoint_advisories
Microsoft Malware Protection Engine VFS API Remote Code Execution (CVE-2017-8558)
2017-06-26 00:00:00
prion
prion
Remote code execution
2017-06-29 13:29:00
cvelist
cvelist
CVE-2017-8558
2017-06-29 13:00:00
openvas
openvas
Microsoft Malware Protection Engine Remote Code Execution Vulnerability (Jul 2017)
2017-07-14 00:00:00
Microsoft Security Essentials Remote Code Execution Vulnerability (Jul 2017)
2017-07-14 00:00:00
nessus
nessus
Microsoft Malware Protection Engine < 1.1.13903 RCE
2017-06-23 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.075

Percentile

94.2%

JSON
Related for NVD:CVE-2017-8558
zdt1threatpost1mscve1kaspersky2cve1checkpoint_advisories1prion1cvelist1openvas2nessus1