PT-2015-1051 · Microsoft · Windows Server 2012+6

Laurent Gaffie · Publicado 2015-04-14 · Atualizado 2026-03-10 · CVE-2015-1635

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows 7 SP1 Microsoft Windows Server 2008 R2 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold Microsoft Windows Server 2012 R2

Description A remote code execution issue exists in the HTTP protocol stack (HTTP.sys) due to improper parsing of specially crafted HTTP requests. This allows remote attackers to execute arbitrary code in the context of the System account. To exploit this issue, an attacker would have to send a specially crafted HTTP request to the affected system.

Recommendations For Microsoft Windows 7 SP1, update to a newer version that contains a fix for this issue. For Microsoft Windows Server 2008 R2 SP1, update to a newer version that contains a fix for this issue. For Microsoft Windows 8, update to a newer version that contains a fix for this issue. For Microsoft Windows 8.1, update to a newer version that contains a fix for this issue. For Microsoft Windows Server 2012 Gold, update to a newer version that contains a fix for this issue. For Microsoft Windows Server 2012 R2, update to a newer version that contains a fix for this issue.

Exploit

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

BDU:2015-09906

CVE-2015-1635

Produtos afetados

Windows

Windows 7

Windows 8

Windows 8.1

Windows Server 2008 R2

Windows Server 2012

Windows Server 2012 R2

Referências · 23

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/ms15_034_ulonglongadd.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/ms15_034_http_sys_memory_dump.rb · Exploit
• 🔥 https://github.com/xPaw/HTTPsys · Exploit
• 🔥 https://github.com/aedoo/CVE-2015-1635-POC · Exploit
• 🔥 https://github.com/technion/erlvulnscan · Exploit
• 🔥 https://exploit-db.com/exploits/36773 · Exploit
• 🔥 https://exploit-db.com/exploits/36776 · Exploit
• 🔥 http://packetstormsecurity.com/files/131463/Microsoft-Windows-HTTP.sys-Proof-Of-Concept.html · Exploit
• 🔥 https://gist.github.com/worawit/54f2e5a7a1a028191f76 · Exploit
• http://technet.microsoft.com/security/bulletin/ms15-034 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-034 · Aviso do Fabricante
• https://t.me/cvenotify/118108 · Publicação no Telegram
• https://t.me/ckure/2026 · Publicação no Telegram
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1635 · Nota de Segurança
• http://securityfocus.com/bid/74013 · Nota