Publicly Attacked Microsoft IIS Zero Day Unlikely to be Patched

🗓️ 29 Mar 2017 15:15:50Reported by Michael MimosoType

threatpost

threatpost🔗 threatpost.com👁 174 Views

Microsoft IIS 6.0 Zero-Day Vulnerability Publicly Exploite

Reporter	Title	Published	Views	Family All 685
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	25 Jan 202112:44	–	githubexploit
GithubExploit	Exploit for Classic Buffer Overflow in Microsoft	28 Apr 201804:11	–	githubexploit
GithubExploit	Exploit for CVE-2026-21509	27 Jan 202609:26	–	githubexploit
GithubExploit	Exploit for Classic Buffer Overflow in Microsoft	29 Mar 201711:20	–	githubexploit
GithubExploit	Exploit for Classic Buffer Overflow in Microsoft	29 Mar 201705:59	–	githubexploit
GithubExploit	Exploit for CVE-2026-21509	27 Jan 202613:56	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	16 Jan 201805:49	–	githubexploit
GithubExploit	Exploit for Classic Buffer Overflow in Microsoft	16 Jul 202107:02	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	21 Nov 201715:22	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	20 Nov 201716:35	–	githubexploit

Source	Link
github	www.github.com/edwardz246003/IIS_exploit
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
msdn	www.msdn.microsoft.com/en-us/library/aa142960(v=exchg.65).aspx
w3techs	www.w3techs.com/technologies/overview/web_server/all
w3techs	www.w3techs.com/technologies/details/ws-microsoftiis/all/all

29 Mar 2017 19:15Current

8.7High risk

Vulners AI Score8.7

EPSS0.99945

microsoft iis zero-day vulnerability exploit webserver buffer overflow scstoragepathfromurl cve-2017-7269 remote code execution webdav market share unsupported versions mitigation