HTTPS.sys RCE

Home » Blog » HTTPS.sys RCE

Description

During the scan, Kayran managed to find an HTTPS.sys RCE vulnerability.
HTTPS.sys RCE (CVE-2015-1635) in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary codes via crafted HTTP requests. Also known as: “HTTP.sys Remote Code Execution Vulnerability.”

To prevent this vulnerability, Windows Server must be updated to the latest version.
This vulnerability exists in Windows servers and was first detected in 2015.
Currently updating your windows system will fix this vulnerability.

Severity/Score

CVSS Version 2.0 – 10.0 High

Recommendation

make sure that the operating system you’re using is updated to the latest version released by Microsoft.

References

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-034

https://cwe.mitre.org/data/definitions/94.html

< Return to all Vulnerabilities

Using your Work Against you – Reverse Engineering

There are many types of cyber attacks in our world, but what makes Reverse Engineering unique? Why is it considered to “Using your Work Against

The Dark Web

Let’s talk about the darker and more mysterious side of the internet, also known as The Dark Web. You’ve probably heard about it, whether it’s

PT- Pentest – Penetration Testing

There’s no way you’ve had a working internet connection in the last year and you haven’t seen or heard the terms PT, Pentest or Penetration

SQLI to RCE

How to preform SQLI TO RCE? One of the most interesting and important things about any site is the database. So, it’s important to protect

A security vulnerability our API hates

As you know, we’ve talked about many different and critical subjects related to application programming and knowing that it is very important to protect them,

The least choking snake – Python

Nice title does it? No but seriously, tell it to my boss. but seriously-Seriously, in this article we are gonna talk about Python, and no,

WEB APPLICATION VULNERABILITY SCANNER

Links

registered user?