Microsoft Malware Protection Engine CVE-2017-0290 Remote Code Execution Vulnerability

Bugtraq ID:	98330
Class:	Design Error
CVE:	CVE-2017-0290
Remote:	Yes
Local:	No
Published:	May 08 2017 12:00AM
Updated:	May 23 2017 04:23PM
Credit:	Tavis Ormandy and Natalie Silvanovich.
Vulnerable:	Microsoft Windows Intune Endpoint Protection 0 Microsoft Windows Defender 0 + Microsoft Windows 10 for 32-bit Systems 0 + Microsoft Windows 10 for x64-based Systems 0 + Microsoft Windows 10 version 1511 for 32-bit Systems 0 + Microsoft Windows 10 version 1511 for x64-based Systems 0 + Microsoft Windows 10 Version 1607 for 32-bit Systems 0 + Microsoft Windows 10 Version 1607 for x64-based Systems 0 + Microsoft Windows 10 version 1703 for 32-bit Systems 0 + Microsoft Windows 10 version 1703 for x64-based Systems 0 + Microsoft Windows 7 for 32-bit Systems SP1 + Microsoft Windows 7 for x64-based Systems SP1 + Microsoft Windows 8.1 for 32-bit Systems 0 + Microsoft Windows 8.1 for x64-based Systems 0 + Microsoft Windows RT 8.1 + Microsoft Windows Server 2016 Microsoft System Center Endpoint Protection 0 Microsoft Security Essentials 0 Microsoft Forefront Security for SharePoint Service Pack 3 0 Microsoft Forefront Endpoint Protection 2010 0 Microsoft Endpoint Protection 0
Not Vulnerable:

Microsoft Malware Protection Engine CVE-2017-0290 Remote Code Execution Vulnerability

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

Microsoft Malware Protection Engine CVE-2017-0290 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.