CVE-2017-8461

Опубликовано: 15 июн. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 6.9

EPSS Низкий

Описание

Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPC server which has Routing and Remote Access enabled via a specially crafted application, aka "Windows RPC Remote Code Execution Vulnerability."

Ссылки

http://packetstormsecurity.com/files/161672/Microsoft-Windows-RRAS-Service-MIBEntryGet-Overflow.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/99012
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038701
Third Party Advisory
VDB Entry
https://support.microsoft.com/en-us/help/4024323/security-update-of-windows-xp-and-windows-server-2003
Patch
Vendor Advisory
http://packetstormsecurity.com/files/161672/Microsoft-Windows-RRAS-Service-MIBEntryGet-Overflow.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/99012
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038701
Third Party Advisory
VDB Entry
https://support.microsoft.com/en-us/help/4024323/security-update-of-windows-xp-and-windows-server-2003
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.08421

Низкий

7.8 High

CVSS3

6.9 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-3vvf-r92p-64xr

CVSS3: 7.8

github

больше 3 лет назад

BDU:2021-04400

CVSS3: 7.8

fstec

больше 8 лет назад

Уязвимость удаленного вызова процедур Windows RPC операционных систем Windows Server 2003, Windows XP, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 92%

0.08421

Низкий

7.8 High

CVSS3

6.9 Medium

CVSS2

Дефекты

NVD-CWE-noinfo