جزئیات آسیب‌پذیری

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-034 vendor-advisoryx_refsource_MS
• https://www.exploit-db.com/exploits/36773/ exploitx_refsource_EXPLOIT-DB
• http://www.osvdb.org/120629 vdb-entryx_refsource_OSVDB
• http://www.securitytracker.com/id/1032109 vdb-entryx_refsource_SECTRACK
• http://www.securityfocus.com/bid/74013 vdb-entryx_refsource_BID
• https://www.exploit-db.com/exploits/36776/ exploitx_refsource_EXPLOIT-DB
• http://packetstormsecurity.com/files/131463/Microsoft-Windows-HTTP.sys-Proof-Of-Concept.html x_refsource_MISC
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1635 government-resource