CVE-2017-8759
Quick assessment
Affected
Microsoft Corporation Microsoft .NET Framework
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Microsoft .NET Framework是美国微软（Microsoft）公司开发的一种全面且一致的编程模型，也是一个用于构建Windows、Windows Store、Windows Phone、Windows Server和Microsoft Azure的应用程序的开发平台。该平台包括C#和Visual Basic编程语言、公共语言运行库和广泛的类库。 Microsoft .NET Framework中存在远程代码执行漏洞。远程攻击者可借助恶意的文档或引用程序利用该漏洞执行代码。以下版本受到影响
Public Exploits 1
ExploitDB · 1
EDB-42711 [remote]
In-the-Wild Activity Observed
cisa_kev · confirmed
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2017-8759
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft .NET Framework 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft .NET Framework是美国微软（Microsoft）公司开发的一种全面且一致的编程模型，也是一个用于构建Windows、Windows Store、Windows Phone、Windows Server和Microsoft Azure的应用程序的开发平台。该平台包括C#和Visual Basic编程语言、公共语言运行库和广泛的类库。 Microsoft .NET Framework中存在远程代码执行漏洞。远程攻击者可借助恶意的文档或引用程序利用该漏洞执行代码。以下版本受到影响
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microsoft Corporation | Microsoft .NET Framework | Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 | - |
|
II. Public POCs for CVE-2017-8759
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Running CVE-2017-8759 exploit sample. | https://github.com/Voulnet/CVE-2017-8759-Exploit-sample | POC Details |
| 2 | NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements | https://github.com/nccgroup/CVE-2017-8759 | POC Details |
| 3 | CVE-2017-8759 - A vulnerability in the SOAP WDSL parser. | https://github.com/vysecurity/CVE-2017-8759 | POC Details |
| 4 | CVE-2017-8759 Research | https://github.com/BasuCert/CVE-2017-8759 | POC Details |
| 5 | None | https://github.com/tahisaad6/CVE-2017-8759-Exploit-sample2 | POC Details |
| 6 | CVE-2017-8759 Remote Code Execution Vulnerability On SOAP WDSL - Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 3.5 | https://github.com/homjxi0e/CVE-2017-8759_-SOAP_WSDL | POC Details |
| 7 | Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim without any complex configuration. | https://github.com/bhdresh/CVE-2017-8759 | POC Details |
| 8 | CVE-2017-8759 | https://github.com/Lz1y/CVE-2017-8759 | POC Details |
| 9 | Simple C# implementation of CVE-2017-8759 | https://github.com/JonasUliana/CVE-2017-8759 | POC Details |
| 10 | Two versions of CVE-2017-8759 exploits | https://github.com/ashr/CVE-2017-8759-exploits | POC Details |
| 11 | None | https://github.com/l0n3rs/CVE-2017-8759 | POC Details |
| 12 | Just My ports of CVE-2017-8759 | https://github.com/ChaitanyaHaritash/CVE-2017-8759 | POC Details |
| 13 | yehnah | https://github.com/smashinu/CVE-2017-8759Expoit | POC Details |
| 14 | CVE-2017-8759 微软word漏洞利用脚本 | https://github.com/adeljck/CVE-2017-8759 | POC Details |
| 15 | CVE-2017-8759 use file | https://github.com/zhengkook/CVE-2017-8759 | POC Details |
| 16 | CVE-2017-8759 || report related with execute code vulnerability | https://github.com/varunsaru/SNP | POC Details |
| 17 | CVE-2017-8759 | .NET Framework Remote Code Execution Vulnerability | https://github.com/GayashanM/OHTS | POC Details |
| 18 | CVE-2017-8759 | https://github.com/sythass/CVE-2017-8759 | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-8759
请登录查看更多情报信息。
Vendor Advisories for CVE-2017-8759 (2)
Exploits & Public PoCs for CVE-2017-8759 (1)
-
🔗 Microsoft Windows .NET Framework - Remote Code Execution - Windows remote Exploit Read full article exploit x_refsource_EXPLOIT-DB
Other References for CVE-2017-8759 (3)
-
https://github.com/GitHubAssessments/CVE_Assessments_01_2020 x_refsource_MISC
-
https://github.com/bhdresh/CVE-2017-8759 x_refsource_MISC
-
https://github.com/nccgroup/CVE-2017-8759 x_refsource_MISC
Same Patch Batch · Microsoft Corporation · 2017-09-13 · 77 CVEs total
| CVE-2017-8728 | Microsoft Windows PDF Library 安全漏洞 | |
| CVE-2017-8751 | Microsoft Windows Edge 安全漏洞 | |
| CVE-2017-8739 | Microsoft Windows Edge scripting引擎信息泄露漏洞 | |
| CVE-2017-8738 | Microsoft Windows Edge scripting引擎安全漏洞 | |
| CVE-2017-8737 | Microsoft Windows PDF Library 安全漏洞 | |
| CVE-2017-8736 | Microsoft Windows Edge和Internet Explorer 信息泄露漏洞 | |
| CVE-2017-8735 | Microsoft Windows Edge 安全漏洞 | |
| CVE-2017-8734 | Microsoft Windows Edge 安全漏洞 | |
| CVE-2017-8733 | Microsoft Windows Internet Explorer 安全漏洞 | |
| CVE-2017-8729 | Microsoft Windows Edge scripting引擎安全漏洞 | |
| CVE-2017-8740 | Microsoft Windows Edge scripting引擎安全漏洞 | |
| CVE-2017-8725 | Microsoft Publisher 安全漏洞 | |
| CVE-2017-8724 | Microsoft Windows Edge 安全漏洞 | |
| CVE-2017-8723 | Microsoft Windows Edge 安全漏洞 | |
| CVE-2017-8720 | Microsoft Windows graphics组件权限许可和访问控制问题漏洞 | |
| CVE-2017-8719 | Microsoft Windows内核组件息泄露漏洞 | |
| CVE-2017-8716 | Microsoft Windows Control Flow Guard 安全漏洞 | |
| CVE-2017-8714 | Microsoft Windows Hyper-V组件安全漏洞 | |
| CVE-2017-8713 | Microsoft Windows Hyper-V组件信息泄露漏洞 | |
| CVE-2017-8712 | Microsoft Windonws 信息泄露漏洞 |
Showing top 20 of 77 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2017-8759
No comments yet