Vulnerability Details : CVE-2015-1635
Public exploit exists!
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."
Vulnerability category: Execute code
Products affected by CVE-2015-1635
- cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*
- cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
CVE-2015-1635 is in the CISA Known Exploited Vulnerabilities Catalog
CISA vulnerability name:
Microsoft HTTP.sys Remote Code Execution Vulnerability
CISA required action:
Apply updates per vendor instructions.
CISA description:
Microsoft HTTP protocol stack (HTTP.sys) contains a vulnerability that allows for remote code execution.
Notes:
https://nvd.nist.gov/vuln/detail/CVE-2015-1635
Added on
2022-02-10
Action due date
2022-08-10
Exploit prediction scoring system (EPSS) score for CVE-2015-1635
97.54%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 100 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2015-1635
-
MS15-034 HTTP Protocol Stack Request Handling HTTP.SYS Memory Information Disclosure
First seen: 2020-04-26auxiliary/scanner/http/ms15_034_http_sys_memory_dumpThis module dumps memory contents using a crafted Range header and affects only Windows 8.1, Server 2012, and Server 2012R2. Note that if the target is running in VMware Workstation, this module has a high likelihood of resulting in BSOD; however, VMware ESX and non- -
MS15-034 HTTP Protocol Stack Request Handling Denial-of-Service
First seen: 2020-04-26auxiliary/dos/http/ms15_034_ulonglongaddThis module will check if scanned hosts are vulnerable to CVE-2015-1635 (MS15-034), a vulnerability in the HTTP protocol stack (HTTP.sys) that could result in arbitrary code execution. This module will try to cause a denial-of-service. Authors: - Bill Finlayson -
CVSS scores for CVE-2015-1635
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
CWE ids for CVE-2015-1635
-
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.Assigned by: nvd@nist.gov (Primary)
References for CVE-2015-1635
-
https://www.exploit-db.com/exploits/36773/
Microsoft Windows - 'HTTP.sys' (PoC) (MS15-034)Exploit;Third Party Advisory;VDB Entry
-
http://www.securitytracker.com/id/1032109
Windows HTTP Protocol Stack ('HTTP.sys') Parsing Error Lets Remote Users Execute Arbitrary Code - SecurityTrackerThird Party Advisory;VDB Entry
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-034
Microsoft Security Bulletin MS15-034 - Critical | Microsoft DocsPatch;Vendor Advisory
-
https://www.exploit-db.com/exploits/36776/
Microsoft Windows - 'HTTP.sys' HTTP Request Parsing Denial of Service (MS15-034)Exploit;Third Party Advisory;VDB Entry
-
http://www.securityfocus.com/bid/74013
Microsoft Windows HTTP Protocol Stack CVE-2015-1635 Remote Code Execution VulnerabilityThird Party Advisory;VDB Entry
-
http://packetstormsecurity.com/files/131463/Microsoft-Windows-HTTP.sys-Proof-Of-Concept.html
Microsoft Windows HTTP.sys Proof Of Concept ≈ Packet StormExploit;Third Party Advisory;VDB Entry
Jump to