Product:
HTTP.sys
Summary
HTTP.sys in Microsoft Windows allows remote attackers to execute arbitrary code via crafted HTTP requests. This vulnerability affects multiple versions of Windows, including Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012. It is known as the HTTP.sys Remote Code Execution Vulnerability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2015-1635 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted HTTP requests to a vulnerable system. If successful, the attacker can execute arbitrary code with the same privileges as the user running the HTTP service. This can lead to complete system compromise, allowing the attacker to take control of the affected system.
Affected Products
- Windows 7 SP1
- Windows Server 2008 R2 SP1
- Windows 8
- Windows 8.1
- Windows Server 2012 Gold
- Windows Server 2012 R2
Mitigation
To mitigate this vulnerability, it is essential to apply updates as per the vendor’s instructions. Keeping systems updated will help protect against potential exploitation of this vulnerability.