CVE-2015-1635 HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests...
HighCVSS 10.0
EPSS 100.0%
CISA KEV
added 2022-02-10 · due 2022-08-10
Exploited in the wild
Framework module
PoC
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."
CISA Known Exploited Vulnerability
- Date added
- 2022-02-10
- Due date (FCEB)
- 2022-08-10
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 7 | All versions | No fix listed |
| Microsoft windows 8 | All versions | No fix listed |
| Microsoft windows 8.1 | All versions | No fix listed |
| Microsoft windows server 2008 | = r2-sp1 | No fix listed |
| Microsoft Windows Server 2012 | All versions | No fix listed |
| Microsoft Windows Server 2012 | = r2 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 120629 broken-link vdb-entry
- 74013 broken-link third-party-advisory vdb-entry
- 1032109 broken-link third-party-advisory vdb-entry
- MS15-034 patch vendor-advisory
- 36773 exploit third-party-advisory vdb-entry
- 36776 exploit third-party-advisory vdb-entry
- www.cisa.gov government-resource us-government-resource