CVE-2017-11940
HighSummary
The Microsoft Malware Protection Engine running on various versions of Windows and Exchange servers does not properly scan a specially crafted file, leading to remote code execution.
Risk Assessment
Exploitation of this vulnerability could allow attackers to remotely execute code on the infected system, posing a significant security risk to the organization.
Recommendation
It is recommended to update the malware protection engine to the latest version and monitor systems for potential attempts to exploit this vulnerability.
Other vulnerabilities in Microsoft Malware Protection Engine, Microsoft Forefront, Microsoft Defender, Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 (Gold, 1511, 1607, 1703, 1709), Windows Server 2016, Windows Server version 1709, Microsoft Exchange Server 2013, Microsoft Exchange Server 2016
See all- CVE-2017-11937High
The Microsoft Malware Protection Engine improperly scans a specially crafted file, leading to remote code execution. This affects various versions of Windows and Exchange servers.
- CVE-2017-8541High
The Microsoft Malware Protection Engine improperly scans a specially crafted file, leading to memory corruption. This affects various versions of Windows and Exchange servers.
- CVE-2017-8538High
The Microsoft Malware Protection Engine, running on various versions of Windows and Microsoft Exchange Server, does not properly scan a specially crafted file leading to memory corruption.
Original NVD description (English source)
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to remote code execution. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability". This is different than CVE-2017-11937.