Published: 12/05/2017 Updated: 03/10/2019

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 7 | Impact Score: 4.7 | Exploitability Score: 2.2

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an malicious user to execute remote code by the way it handles certain requests, aka "Windows SMB Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0272, CVE-2017-0278, and CVE-2017-0279.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows 10 1511
microsoft windows 10 1607
microsoft windows server 2012 -
microsoft windows server 2012 r2
microsoft windows 10 -
microsoft windows server 2008
microsoft windows server 2008 r2
microsoft windows 10 1703
microsoft windows 7
microsoft windows server 2016
microsoft windows 8.1
microsoft windows rt 8.1

It's 2017 and Windows PCs are being owned by EPS files, webpages

The Register • Shaun Nichols in San Francisco • 09 May 2017

Get patching ASAP as exploits are being used in the wild – and fix Adobe stuff, too

Microsoft has today published patches for more than 50 security flaws in its products – including three serious holes being exploited right now in the wild. These updates should be applied as soon as possible. The May edition of Patch Tuesday addresses blunders in Internet Explorer, Edge, Windows, Office, and the .NET Framework. In total, 55 bugs have been squashed, including 17 that have been rated as critical security risks. Of the three bad bugs being actively exploited in the wild, two can...

CVE-2017-0277

Vulnerability Summary

Recent Articles

References

Vulmon Search

About

Products

Connect