CVE-2015-1635criticalunder attackCWE-94

CVE-2015-1635

Published · Updated

Follow this CVE+ Monitor HTTP.sys

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 100%
from disclosure to weapon1 day
Published on NVDApr 14
1st PoC+1d
CISA KEV+2494d
Action required by CISAfederal deadline: 2022-08-10

Apply updates per vendor instructions.

In short

A flaw in Windows' HTTP.sys component allows attackers to run malicious code on a computer by sending specially crafted HTTP requests over the network. This is critical because it can be exploited without authentication.

Technical detail

HTTP.sys in affected Windows versions contains a memory corruption vulnerability (CWE-94: Improper Control of Generation of Code) that can be triggered via malformed HTTP requests. An unauthenticated remote attacker can exploit this to achieve arbitrary code execution with the privileges of the HTTP.sys process, typically SYSTEM-level access.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
public PoCs found — 31
exploitdbwww.exploit-db.com/exploits/36776unverifiedexploitdbwww.exploit-db.com/exploits/36773unverifiedgithubgithub.com/technion/erlvulnscan★ 10githubgithub.com/aedoo/CVE-2015-1635-POC★ 9githubgithub.com/h3x0v3rl0rd/CVE-2015-1635-POC★ 2githubgithub.com/Zx7ffa4512-Python/Project-CVE-2015-1635★ 2githubgithub.com/Cappricio-Securities/CVE-2015-1635★ 1githubgithub.com/w01ke/CVE-2015-1635-POC★ 1githubgithub.com/bongbongco/MS15-034★ 1githubgithub.com/u0pattern/Remove-IIS-RIIS★ 0githubgithub.com/h3x0v3rl0rd/CVE-2015-1635★ 0githubgithub.com/SkinAir/ms15-034-Scan★ 0githubgithub.com/wiredaem0n/chk-ms15-034★ 0githubgithub.com/moeinmiadi/CVE-2015-1635_PoC★ 0githubgithub.com/hedgecore/HTTPsys★ 0cve_referencewww.exploit-db.com/exploits/36776/unverifiedvulncheckvulncheck.com/xdb/640f8e881740unverifiedcve_referencepacketstormsecurity.com/files/131463/Microsoft-Windows-HTTP.sys-Proof-Of-Concept.htmlunverifiedcve_referencewww.exploit-db.com/exploits/36773/unverifiedvulncheckvulncheck.com/xdb/f333a38f931aunverifiedvulncheckvulncheck.com/xdb/2d56398584adunverifiedvulncheckvulncheck.com/xdb/215deead4210unverifiedvulncheckvulncheck.com/xdb/693e42549523unverifiedvulncheckvulncheck.com/xdb/7690005e3e24unverifiedvulncheckvulncheck.com/xdb/df55a69b1021unverifiedvulncheckvulncheck.com/xdb/b5524732116bunverifiedvulncheckvulncheck.com/xdb/bd16f7896930unverifiedvulncheckvulncheck.com/xdb/55628ec20b97unverifiedvulncheckvulncheck.com/xdb/58a3b1e81ee2unverifiedvulncheckvulncheck.com/xdb/4d00daf97977unverifiedvulncheckvulncheck.com/xdb/661c0f964319unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.