Page 2 of 21 results (0.010 seconds)

CVSS: 9.3EPSS: 82%CPEs: 15EXPL: 0

CVE-2017-11937 – Microsoft Security Bulletin Summary for December, 2017

https://notcve.org/view.php?id=CVE-2017-11937

06 Dec 2017 — The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to remote code execution. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability". Microsoft Malware Protection Engine que se ejecute en Microsoft Forefr... • http://www.securityfocus.com/bid/102070 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 73%CPEs: 17EXPL: 2

CVE-2017-8541 – Microsoft MsMpEng - Use-After-Free via Saved Callers

https://notcve.org/view.php?id=CVE-2017-8541

26 May 2017 — The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability", a different vulnerability than... • https://packetstorm.news/files/id/142753 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.5EPSS: 46%CPEs: 17EXPL: 0

CVE-2017-8539 – Microsoft Security Bulletin CVE Update for May, 2017

https://notcve.org/view.php?id=CVE-2017-8539

26 May 2017 — The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to denial of service. aka "Microsoft Malware Protection Engine Denial of Service Vulnerability", a different vulnerability than CVE... • http://www.securityfocus.com/bid/98704 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-369: Divide By Zero CWE-476: NULL Pointer Dereference CWE-674: Uncontrolled Recursion •

CVSS: 5.5EPSS: 46%CPEs: 17EXPL: 0

CVE-2017-8542 – Microsoft Security Bulletin CVE Update for May, 2017

https://notcve.org/view.php?id=CVE-2017-8542

26 May 2017 — The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to denial of service. aka "Microsoft Malware Protection Engine Denial of Service Vulnerability", a different vulnerability than CVE... • http://www.securityfocus.com/bid/98707 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-369: Divide By Zero CWE-476: NULL Pointer Dereference CWE-674: Uncontrolled Recursion •

CVSS: 9.3EPSS: 5%CPEs: 17EXPL: 2

CVE-2017-8538 – Microsoft MsMpEng - Multiple Crashes While Scanning Malformed Files

https://notcve.org/view.php?id=CVE-2017-8538

26 May 2017 — The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability", a different vulnerability than... • https://packetstorm.news/files/id/142713 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 71%CPEs: 15EXPL: 4

CVE-2017-0290 – Microsoft Security Essentials / SCEP (Microsoft Windows 8/8.1/10 / Windows Server) - 'MsMpEng' Remote Type Confusion

https://notcve.org/view.php?id=CVE-2017-0290

09 May 2017 — The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 does not properly scan a specially crafted file leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." El motor de protección de malware de Microsoft que se ejecuta en Microso... • https://www.exploit-db.com/exploits/41975 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.5EPSS: 3%CPEs: 1EXPL: 0

CVE-2014-2779

https://notcve.org/view.php?id=CVE-2014-2779

18 Jun 2014 — mpengine.dll in Microsoft Malware Protection Engine before 1.1.10701.0 allows remote attackers to cause a denial of service (system hang) via a crafted file. mpengine.dll en Microsoft Malware Protection Engine anterior a 1.1.10701.0 permite a atacantes remotos causar una denegación de servicio (cuelgue de sistema) a través de un fichero manipulado. • http://secunia.com/advisories/59337 • CWE-20: Improper Input Validation •

CVSS: 9.3EPSS: 3%CPEs: 1EXPL: 0

CVE-2013-1346

https://notcve.org/view.php?id=CVE-2013-1346

15 May 2013 — mpengine.dll in Microsoft Malware Protection Engine before 1.1.9506.0 on x64 platforms allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file. mpengine.dll en Microsoft Malware Protection Engine anterior a 1.1.9506.0 sobre plataformar x64, permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio a través de un archivo manipulado. • http://technet.microsoft.com/security/advisory/2846338 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 0

CVE-2011-0037

https://notcve.org/view.php?id=CVE-2011-0037

25 Feb 2011 — Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key. Microsoft Malware Protection Engine anterior a v1.1.6603.0, tal como se utilizó en Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, F... • http://secunia.com/advisories/43468 • CWE-20: Improper Input Validation •

CVSS: 5.5EPSS: 87%CPEs: 10EXPL: 0

CVE-2008-1437

https://notcve.org/view.php?id=CVE-2008-1437

13 May 2008 — Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (engine hang and restart) via a crafted file, a different vulnerability than CVE-2008-1438. Vulnerabilidad no especificada en la Máquina de Protección de Malware de Microsoft (mpengine.dll) versiones 1.1.3520.0 y 0.1.13.192, tal y como se usa en múltiples productos de Microsoft, permite a atacantes s... • http://marc.info/?l=bugtraq&m=121129490723574&w=2 • CWE-399: Resource Management Errors •