by Kastro
Paper/Archive/CVE-2015-1635

CVE-2015-1635

Microsoft HTTP.sys — Microsoft HTTP.sys Remote Code Execution Vulnerability

KEV · due 10 AugEPSS 100%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (ADP)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 100.01.000 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

advisorydocs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-034exploitexploit-db.com/exploits/36773refosvdb.org/120629refsecuritytracker.com/id/1032109refsecurityfocus.com/bid/74013exploitexploit-db.com/exploits/36776refpacketstormsecurity.com/files/131463/Microsoft-Windows-HTTP.sys-Proof-Of-Concept.htmlrefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1635kevcisa.gov/known-exploited-vulnerabilities-catalog