CVE-2017-11940

EPSS 32.41%
Published 08.12.2017 14:29:00
Last modified 20.04.2025 01:37:25
Source secure@microsoft.com
Teams watchlist Login
Open Login

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to remote code execution. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability". This is different than CVE-2017-11937.

Affected products Warnungen 0 Metrics 3 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Malware Protection Engine Version <= 1.1.14306.0

   Microsoft ≫ Exchange Server Version2013
   Microsoft ≫ Exchange Server Version2016
   Microsoft ≫ Forefront Endpoint Protection 2010 Version-
   Microsoft ≫ Windows Defender Version-
   Microsoft ≫ Windows 10 Version-
   Microsoft ≫ Windows 10 Version1511
   Microsoft ≫ Windows 10 Version1607
   Microsoft ≫ Windows 10 Version1703
   Microsoft ≫ Windows 10 Version1709
   Microsoft ≫ Windows 7 Version- Updatesp1
   Microsoft ≫ Windows 8.1 Version-
   Microsoft ≫ Windows Rt 8.1 Version-
   Microsoft ≫ Windows Server 2016 Version-
   Microsoft ≫ Windows Server 2016 Version1709

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	32.41%	0.967

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.securitytracker.com/id/1039972

Third Party Advisory

VDB Entry

http://www.securityfocus.com/bid/102104

Third Party Advisory

VDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11940

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-11940

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-11940

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-11940

EUVD