Privilege escalation vulnerability in Windows IIS

Description

An improper sanitizing of a specially designed request was found in Microsoft IIS Server. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a specially designed URL.

Original advisories

• MS17-016

• CVE-2017-0055

Exploitation

Public exploits exist for this vulnerability.

Related products

• Microsoft-Windows-Vista-4
• Microsoft-Windows-Server-2012
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT

CVE list

• CVE-2017-0055
  warning

KB list

• 4012217
• 4012215
• 4012216
• 4012606
• 4013198
• 4013429
• 4012212
• 4012214
• 4012213
• 4012373
• 4013074

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com