CVSS: 9.3EPSS: 90%CPEs: 15EXPL: 4CVE-2017-0290 – Microsoft Security Essentials / SCEP (Microsoft Windows 8/8.1/10 / Windows Server) - 'MsMpEng' Remote Type Confusion
https://notcve.org/view.php?id=CVE-2017-0290
09 May 2017 — The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 does not properly scan a specially crafted file leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." El motor de protección de malware de Microsoft que se ejecuta en Microso... • https://www.exploit-db.com/exploits/41975 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 2%CPEs: 3EXPL: 0CVE-2013-3154
https://notcve.org/view.php?id=CVE-2013-3154
10 Jul 2013 — The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory, aka "Microsoft Windows 7 Defender Improper Pathname Vulnerability." La funcionalidad de actualización de firma en Windows Defender en Microsoft Windows 7 y Windows Server 2008 R2 se basa en una ruta de acceso incorrecta, permite a usuarios locales conseguir... • http://blogs.technet.com/b/srd/archive/2013/07/09/assessing-risk-for-the-july-2013-security-updates.aspx • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.3EPSS: 0%CPEs: 4EXPL: 0CVE-2013-0078
https://notcve.org/view.php?id=CVE-2013-0078
09 Apr 2013 — The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an incorrect pathname for MsMpEng.exe, which allows local users to gain privileges via a crafted application, aka "Microsoft Antimalware Improper Pathname Vulnerability." El Microsoft Antimalware Client en Windows Defender en Windows 8 y Windows RT utiliza un nombre incorrecto de ruta para MsMpEng.exe, lo que permite a usuarios locales elevar sus privilegios a través de una aplicación manipulada. Aka "Microsoft Antimalware... • http://www.us-cert.gov/ncas/alerts/TA13-100A • CWE-20: Improper Input Validation •
CVSS: 7.0EPSS: 0%CPEs: 2EXPL: 0CVE-2010-5165
https://notcve.org/view.php?id=CVE-2010-5165
25 Aug 2012 — Race condition in Malware Defender 2.6.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack. NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to... • http://archives.neohapsis.com/archives/bugtraq/2010-05/0026.html • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 0CVE-2011-0037
https://notcve.org/view.php?id=CVE-2011-0037
25 Feb 2011 — Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key. Microsoft Malware Protection Engine anterior a v1.1.6603.0, tal como se utilizó en Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, F... • http://secunia.com/advisories/43468 • CWE-20: Improper Input Validation •
CVSS: 5.5EPSS: 50%CPEs: 10EXPL: 0CVE-2008-1437
https://notcve.org/view.php?id=CVE-2008-1437
13 May 2008 — Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (engine hang and restart) via a crafted file, a different vulnerability than CVE-2008-1438. Vulnerabilidad no especificada en la Máquina de Protección de Malware de Microsoft (mpengine.dll) versiones 1.1.3520.0 y 0.1.13.192, tal y como se usa en múltiples productos de Microsoft, permite a atacantes s... • http://marc.info/?l=bugtraq&m=121129490723574&w=2 • CWE-399: Resource Management Errors •
CVSS: 5.5EPSS: 43%CPEs: 10EXPL: 0CVE-2008-1438
https://notcve.org/view.php?id=CVE-2008-1438
13 May 2008 — Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk space exhaustion) via a file with "crafted data structures" that trigger the creation of large temporary files, a different vulnerability than CVE-2008-1437. Vulnerabilidad no especificada en la Máquina de Protección de Malware de Microsoft (mpengine.dll) versiones 1.1.3520.0 y 0.1.13.192, tal ... • http://marc.info/?l=bugtraq&m=121129490723574&w=2 • CWE-399: Resource Management Errors •
CVSS: 9.3EPSS: 50%CPEs: 5EXPL: 0CVE-2006-5270
https://notcve.org/view.php?id=CVE-2006-5270
13 Feb 2007 — Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefront Security, allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file. Desbordamiento de entero en el Motor de Protección de Malware de Microsoft (mpengine.dll), como el usado en Windows Live OneCare, Antigen, Defender, y Forefront Security, permite a atacantes remotos con la complicidad del usuario ejecutar código de su elección mediante un... • http://secunia.com/advisories/24146 •