CVE-2017-7269 Microsoft Windows Server Buffer Overflow
Remote attackers can execute arbitrary code on Windows Server 2003 via a buffer overflow in the IIS WebDAV service.
- Exploited in the wild
- Since 3 Nov 2021
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-7269?
CVE-2017-7269 is a critical memory corruption vulnerability in Microsoft Internet Information Services, published on 27 Mar 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.
Weakness: CWE-120
Which versions are affected by CVE-2017-7269?
It affects 1 product.
Products include Microsoft Internet Information Services.
How do I fix CVE-2017-7269?
No fix has been published for CVE-2017-7269 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 3 May 2022.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2017-7269 being exploited?
Yes. Attackers have exploited CVE-2017-7269 in the wild since at least 3 Nov 2021.
Public exploit code: 1 Metasploit module, 2 Exploit-DB entries, 1 Nuclei template and 19 proofs of concept on GitHub.
Other vulnerabilities in Microsoft Internet Information Services
- CVE-2010-3972 Memory corruption in n/a
- CVE-2008-4301 Other in n/a
- CVE-2007-2815 The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL
- CVE-2003-0224 Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web pa
- CVE-1999-0233 IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.
Sources
Also known as GHSA-fj79-76j8-9vjm.