Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 does not properly scan a specially crafted file leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability."
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 10 products
3/ Antivirus automatically scan hostile files, they are hungry and catch every input. Historically running with full privileges. Project Zero found wormable bugs in Symantec. Defender CVE-2017-0290 For years, browsers had better input validation and sandboxing than AV engines.
15 of 15 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | forefront_security | - | - | - |
| App | microsoft | malware_protection_engine | - | - | - |
| OS | microsoft | windows_10 | - | - | - |
| OS | microsoft | windows_10 | 1511 | - | - |
| OS | microsoft | windows_10 | 1607 | - | - |
| OS | microsoft | windows_10 | 1703 | - | - |
| OS | microsoft | windows_7 | - | - | - |
| OS | microsoft | windows_8.1 | - | - | - |
| App | microsoft | windows_defender | - | - | - |
| OS | microsoft | windows_rt_8.1 | - | - | - |
| OS | microsoft | windows_server_2008 | - | - | - |
| OS | microsoft | windows_server_2008 | r2 | - | - |
| OS | microsoft | windows_server_2012 | - | - | - |
| OS | microsoft | windows_server_2012 | r2 | - | - |
| OS | microsoft | windows_server_2016 | - | - | - |