VulnerabilityAnalyzed
CVE-2015-1635
Microsoft HTTP.sys Remote Code Execution Vulnerability
KEVCRITICAL 9.8EPSS 100.0%
Does this matter?
Known to be exploited in the wild (CISA KEV, CISA remediation deadline 10 August 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise.
Description
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 100.00% probability · 100th percentile
- CISA KEV
- Listed 10 February 2022 · due 10 August 2022
- Weakness
- CWE-94
- Affected
- microsoft/windows 7 · microsoft/windows 8 · microsoft/windows 8.1 · microsoft/windows server 2008 · microsoft/windows server 2012
- Source
- secure@microsoft.com
CISA notes
Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2015-1635
References
- http://packetstormsecurity.com/files/131463/Microsoft-Windows-HTTP.sys-Proof-Of-Concept.htmlExploit, Third Party Advisory, VDB Entry
- http://www.osvdb.org/120629Broken Link
- http://www.securityfocus.com/bid/74013Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032109Broken Link, Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-034Patch, Vendor Advisory
- https://www.exploit-db.com/exploits/36773/Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/36776/Exploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/131463/Microsoft-Windows-HTTP.sys-Proof-Of-Concept.htmlExploit, Third Party Advisory, VDB Entry
- http://www.osvdb.org/120629Broken Link
- http://www.securityfocus.com/bid/74013Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032109Broken Link, Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-034Patch, Vendor Advisory
- https://www.exploit-db.com/exploits/36773/Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/36776/Exploit, Third Party Advisory, VDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1635US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.