(MS15-034)Vulnerability in HTTP.sys Could Allow Remote Code Execution (3042553)

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: CRITICAL

  CVE Identifier: CVE-2015-1635

  Advisory Date: SEP 03, 2015

---

  DESCRIPTION

This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if an attacker sends a specially crafted HTTP request to an affected Windows system.

  SOLUTION

  PATCH: https://technet.microsoft.com/en-us/library/security/ms15-034

Related Blog Entries

• IIS at Risk: An In-Depth Look into CVE-2015-1635
• IIS At Risk: The HTTP Protocol Stack Vulnerability