Arbitrary code execution vulnerability in Microsoft Malware Protection Engine

Описание

An improper scanning of specially designed files was found in Microsoft Malware Protection Engine in Microsoft Windows. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely by putting a specially designed file to a directory scanned by the Microsoft Malware Protection Engine. It can be done via a website when it is being viewed by a user, via email message or an Instant Messenger message or a shared location.

Первичный источник обнаружения

• CVE-2017-8558
  

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Microsoft-Windows-10

Список CVE

• CVE-2017-8558
  critical

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com