Beschreibung
Multiple serious vulnerabilities have been found in Microsoft Malware Protection Engine. Malicious users can exploit these vulnerabilities to cause a denial of service and execute arbitrary code.
Below is a complete list of vulnerabilities:
- Multiple vulnerabilities related to an improper scanning leading to scan timeout can be exploited remotely via a specially designed file to cause a denial of service;
- Multiple vulnerabilities related to an improper scanning leading to memory corruption can be exploited remotely via a specially designed file to execute arbitrary code.
Technical details
To exploit all vulnerabilities, an attacker has to put a specially designed file to a directory scanned by the Microsoft Malware Protection Engine. It can be done via a website when it is being viewed by a user, via email message or an Instant Messenger message or a shared location.
Ursprüngliche Informationshinweise
- CVE-2017-8539
- CVE-2017-8538
- CVE-2017-8542
- CVE-2017-8535
- CVE-2017-8541
- CVE-2017-8537
- CVE-2017-8536
- CVE-2017-8542
- CVE-2017-8541
- CVE-2017-8540
- CVE-2017-8539
- CVE-2017-8538
- CVE-2017-8537
- CVE-2017-8536
- CVE-2017-8535
CVE Liste
- CVE-2017-8542 critical
- CVE-2017-8541 critical
- CVE-2017-8540 critical
- CVE-2017-8539 critical
- CVE-2017-8538 critical
- CVE-2017-8537 critical
- CVE-2017-8536 critical
- CVE-2017-8535 critical
KB Liste
Mehr erfahren
Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com