CVE-2017-8558

EPSS 43.6%

Vexday Risk Score

35Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS —EPSS 43.6%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

27 Jun 2017Public PoC

29 Jun 2017Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703 does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability".

Affected products

Microsoft Corporation · Microsoft Malware Protection Engine

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/42264/unverified exploitdbwww.exploit-db.com/exploits/42264unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8558 https://www.exploit-db.com/exploits/42264/http://www.securityfocus.com/bid/99262 http://www.securitytracker.com/id/1038783 http://www.securitytracker.com/id/1038784