Code execution vulnerability in Microsoft HTTPS.sys

Description

An unspecified vulnerability was found in Microsoft products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed HTTP request.

Original advisories

• MS15-034

• CVE-2015-1635

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008

CVE list

• CVE-2015-1635
  critical

KB list

• 3042553

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com