Microsoft Corporation Microsoft Malware Protection Engine
En bref
- Source
- NVD
- EPSS
- EPSS 81.42 % · centile 100 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- microsoft
- Statut NVD
- Modified
Rechercher sur…
Description
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 does not properly scan a specially crafted file leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability."
Faiblesses (CWE)
- CWE-119 — Opération hors des limites d'un tampon mémoire
Références
- https://arstechnica.com/information-technology/2017/05/windows-defender-nscript-remote-vulnerability/
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1252
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0290
- http://www.securitytracker.com/id/1038420
- https://www.exploit-db.com/exploits/41975/
- http://www.securitytracker.com/id/1038419
- https://0patch.blogspot.si/2017/05/0patching-worst-windows-remote-code.html
- https://twitter.com/natashenka/status/861748397409058816
- https://technet.microsoft.com/library/security/4022344
- http://www.securityfocus.com/bid/98330
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.0 | HIGH 7.8 | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | HIGH 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2017-0646
- GCVE · GCVE-0-2017-0290
Avis du CERT-FR
- CERTFR-2017-AVI-151 — Vulnérabilité dans Microsoft Malware Protection Engine · cert.ssi.gouv.fr
- CERTFR-2017-AVI-148 — Multiples vulnérabilités dans Microsoft Windows · cert.ssi.gouv.fr
- CERTFR-2017-AVI-147 — Multiples vulnérabilités dans Microsoft Office · cert.ssi.gouv.fr
- CERTFR-2017-ALE-009 — Vulnérabilité dans Microsoft Malware Protection Engine · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:a:microsoft:forefront_security:-:*:*:*:*:*:*:*cpe:2.3:a:microsoft:malware_protection_engine:*:*:*:*:*:*:*:*≤ 1.1.13701.0cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Microsoft Corporation · Microsoft Malware Protection Engine | affected Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |