Microsoft Windows LNK CVE-2017-8464 Remote Code Execution Vulnerability
BID:98818
Info
Microsoft Windows LNK CVE-2017-8464 Remote Code Execution Vulnerability
| Bugtraq ID: | 98818 |
| Class: | Design Error |
| CVE: |
CVE-2017-8464 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 13 2017 12:00AM |
| Updated: | Aug 04 2017 12:09PM |
| Credit: | Microsoft |
| Vulnerable: |
Microsoft Windows Server 2016 0 Microsoft Windows Server 2012 R2 0 Microsoft Windows Server 2012 0 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft Windows Server 2008 R2 for Itanium-based Systems SP1 Microsoft Windows Server 2008 for x64-based Systems SP2 Microsoft Windows Server 2008 for Itanium-based Systems SP2 Microsoft Windows Server 2008 for 32-bit Systems SP2 Microsoft Windows RT 8.1 Microsoft Windows 8.1 for x64-based Systems 0 Microsoft Windows 8.1 for 32-bit Systems 0 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 10 version 1703 for x64-based Systems 0 Microsoft Windows 10 version 1703 for 32-bit Systems 0 Microsoft Windows 10 Version 1607 for x64-based Systems 0 Microsoft Windows 10 Version 1607 for 32-bit Systems 0 Microsoft Windows 10 version 1511 for x64-based Systems 0 Microsoft Windows 10 version 1511 for 32-bit Systems 0 Microsoft Windows 10 for x64-based Systems 0 Microsoft Windows 10 for 32-bit Systems 0 |
| Not Vulnerable: | |
Discussion
Microsoft Windows LNK CVE-2017-8464 Remote Code Execution Vulnerability
Microsoft Windows is prone to a remote code-execution vulnerability.
Successful exploits will allow an attacker to execute arbitrary code on the target system. Failed attacks will cause denial of service conditions.
Microsoft Windows is prone to a remote code-execution vulnerability.
Successful exploits will allow an attacker to execute arbitrary code on the target system. Failed attacks will cause denial of service conditions.
Exploit / POC
Microsoft Windows LNK CVE-2017-8464 Remote Code Execution Vulnerability
The following metasploit exploit code is available:
The following metasploit exploit code is available:
Solution / Fix
Microsoft Windows LNK CVE-2017-8464 Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Microsoft Windows LNK CVE-2017-8464 Remote Code Execution Vulnerability
References:
References: