Microsoft Windows HTTP Protocol Stack CVE-2015-1635 Remote Code Execution Vulnerability
BID:74013
Info
Microsoft Windows HTTP Protocol Stack CVE-2015-1635 Remote Code Execution Vulnerability
| Bugtraq ID: | 74013 |
| Class: | Design Error |
| CVE: |
CVE-2015-1635 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 14 2015 12:00AM |
| Updated: | Aug 10 2017 06:10PM |
| Credit: | Citrix Security Response Team |
| Vulnerable: |
Siemens SPECT/CT Systems 0 Siemens SPECT Workplaces/Symbia.net 0 Siemens SPECT Systems 0 Siemens PET/CT Systems 0 Microsoft Windows Server 2012 R2 0 Microsoft Windows Server 2012 0 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft Windows Server 2008 R2 for Itanium-based Systems SP1 Microsoft Windows 8 for x64-based Systems 0 Microsoft Windows 8 for 32-bit Systems 0 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows 7 for 32-bit Systems SP1 Avaya Meeting Exchange - Webportal 6.2 Avaya Meeting Exchange - Webportal 6.0 Avaya Meeting Exchange - Webportal 5.2.1 Avaya Meeting Exchange - Webportal 5.2 Avaya Meeting Exchange - Webportal 5.0.1 Avaya Meeting Exchange - Webportal 5.0 Avaya Meeting Exchange - Web Conferencing Server 6.2 Avaya Meeting Exchange - Web Conferencing Server 6.0 Avaya Meeting Exchange - Web Conferencing Server 5.2.1 Avaya Meeting Exchange - Web Conferencing Server 5.2 Avaya Meeting Exchange - Web Conferencing Server 5.0.1 Avaya Meeting Exchange - Web Conferencing Server 5.0 Avaya Meeting Exchange - Streaming Server 6.2 Avaya Meeting Exchange - Streaming Server 6.0 Avaya Meeting Exchange - Streaming Server 5.2.1 Avaya Meeting Exchange - Streaming Server 5.2 Avaya Meeting Exchange - Streaming Server 5.0.1 Avaya Meeting Exchange - Streaming Server 5.0 Avaya Meeting Exchange - Recording Server 6.2 Avaya Meeting Exchange - Recording Server 6.0 Avaya Meeting Exchange - Recording Server 5.2.1 Avaya Meeting Exchange - Recording Server 5.2 Avaya Meeting Exchange - Recording Server 5.0.1 Avaya Meeting Exchange - Recording Server 5.0 Avaya Meeting Exchange - Client Registration Server 6.2 Avaya Meeting Exchange - Client Registration Server 6.0 Avaya Meeting Exchange - Client Registration Server 5.2.1 Avaya Meeting Exchange - Client Registration Server 5.2 Avaya Meeting Exchange - Client Registration Server 5.0.1 Avaya Meeting Exchange - Client Registration Server 5.0 |
| Not Vulnerable: | |
Discussion
Microsoft Windows HTTP Protocol Stack CVE-2015-1635 Remote Code Execution Vulnerability
Microsoft Windows is prone to a remote code-execution vulnerability.
An attacker can leverage this issue to execute arbitrary code in the context of the system account. Failed exploit attempts will likely result in denial-of-service conditions.
Microsoft Windows is prone to a remote code-execution vulnerability.
An attacker can leverage this issue to execute arbitrary code in the context of the system account. Failed exploit attempts will likely result in denial-of-service conditions.
Exploit / POC
Microsoft Windows HTTP Protocol Stack CVE-2015-1635 Remote Code Execution Vulnerability
The following exploit code is available:
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following exploit code is available:
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
Microsoft Windows HTTP Protocol Stack CVE-2015-1635 Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Microsoft Windows 8 for 32-bit Systems 0
Microsoft Windows 7 for 32-bit Systems SP1
Microsoft Windows 7 for x64-based Systems SP1
Microsoft Windows 8 for x64-based Systems 0
Microsoft Windows Server 2008 R2 for x64-based Systems SP1
Microsoft Windows Server 2012 0
Microsoft Windows Server 2012 R2 0
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Microsoft Windows 8 for 32-bit Systems 0
-
Microsoft Security Update for Windows 8 (KB3042553)
https://www.microsoft.com/downloads/details.aspx?familyid=6791bb93-392 5-406c-87a1-1f44a7133db0
Microsoft Windows 7 for 32-bit Systems SP1
-
Microsoft Security Update for Windows 7 (KB3042553)
https://www.microsoft.com/downloads/details.aspx?familyid=5e2fda5f-60b a-4769-81b6-2b3206f25831
Microsoft Windows 7 for x64-based Systems SP1
-
Microsoft Security Update for Windows 7 for x64-based Systems (KB3042553)
https://www.microsoft.com/downloads/details.aspx?familyid=b0a6edc3-f69 3-4328-aebc-001bf96bf1b2
Microsoft Windows 8 for x64-based Systems 0
-
Microsoft Security Update for Windows 8 for x64-based Systems (KB3042553)
https://www.microsoft.com/downloads/details.aspx?familyid=428768eb-d99 d-464b-b546-b04dab5d6476
Microsoft Windows Server 2008 R2 for x64-based Systems SP1
-
Microsoft Security Update for Windows Server 2008 R2 x64 Edition (KB3042553)
https://www.microsoft.com/downloads/details.aspx?familyid=70ec42c6-588 c-4d32-9ec0-bcc39085fbe7
Microsoft Windows Server 2012 0
-
Microsoft Security Update for Windows Server 2012 (KB3042553)
https://www.microsoft.com/downloads/details.aspx?familyid=66fc9a93-28c e-4d50-9a11-fa8254390a6f
Microsoft Windows Server 2012 R2 0
-
Microsoft Security Update for Windows Server 2012 R2 (KB3042553)
https://www.microsoft.com/downloads/details.aspx?familyid=3c995a85-606 8-4cf0-a54d-220c2f061b95
References
Microsoft Windows HTTP Protocol Stack CVE-2015-1635 Remote Code Execution Vulnerability
References:
References:
- Microsoft Homepage (Microsoft)
- ASA-2015-151 (Avaya)
- ICSMA-17-215-02: Siemens Molecular Imaging Vulnerabilities (CERT)
- Microsoft Security Bulletin MS15-034 (Microsoft)