CVE-2017-8487observed exploitation

CVE-2017-8487: vulnerability in Microsoft Windows

Published · Updated

57Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.

ssvc Actepss 54%
from disclosure to weapon6 days
Published on NVDJun 15
1st PoC+6d
VulnCheck+154d
exploitation probability
54%top 1% of all CVEs
observed exploitation
yesVulnCheck
2 public exploit(s)
Windows OLE in Windows XP and Windows Server 2003 allows an attacker to execute code when a victim opens a specially crafted file or program aka "Windows olecnv32.dll Remote Code Execution Vulnerability."
Affected products
Microsoft Corporation · Microsoft Windows
public PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/42211cve_referencewww.exploit-db.com/exploits/42211/unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Microsoft Windows

In the same product, most dangerous first.

CVE-2017-8543CRITICALCVE-2017-8543EPSS 74.2%KEVCVE-2017-0263HIGHCVE-2017-0263EPSS 10.0%KEVCVE-2017-11885—CVE-2017-11885EPSS 45.5%CVE-2017-0190—CVE-2017-0190EPSS 43.5%CVE-2017-0215—CVE-2017-0215EPSS 35.8%CVE-2017-8461—CVE-2017-8461EPSS 20.4%
References
https://support.microsoft.com/en-us/help/4025218/security-update-for-windows-xp-and-windows-server-2003https://www.exploit-db.com/exploits/42211/http://www.securityfocus.com/bid/99013http://www.securitytracker.com/id/1038702