Title

Microsoft Windows HTTP stack Remote Code Execution Vulnerability (MS15-034) (Cat I impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability in the HTTP protocol stack (HTTP.sys). To exploit this vulnerability, an attacker would send a specially crafted HTTP request to the affected system. If successfully exploited, the attacker would execute arbitrary code in the context of the System account.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-59899

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.