cnvd - cnvd-2017-26603

cnvd-2017-26603

Vulnerability from cnvd

Title: Microsoft .NET Framework远程代码执行漏洞

Description:

Microsoft .NET Framework是用于Windows的新托管代码编程模型。

Microsoft .NET Framework存在远程代码执行漏洞，主要影响.NET 框架的SOAP WSDL (Web 服务描述语言)解析器，攻击者可通过构造恶意Microsoft Office RTF文档利用该漏洞传播恶意软件。

Severity: 高

Patch Name: Microsoft .NET Framework远程代码执行漏洞的补丁

Patch Description:

Microsoft .NET Framework是用于Windows的新托管代码编程模型。

Microsoft .NET Framework存在远程代码执行漏洞，主要影响.NET 框架的SOAP WSDL (Web 服务描述语言)解析器，攻击者可通过构造恶意Microsoft Office RTF文档利用该漏洞传播恶意软件。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

用户可联系供应商获得补丁信息： https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759

Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-8759 http://www.securityfocus.com/bid/100742

Impacted products

Name
['Microsoft .NET Framework 2.0', 'Microsoft .NET Framework 3.5', 'Microsoft .NET Framework 3.5.1', 'Microsoft .Net Framework 4.5.2', 'Microsoft .NET Framework 4.6', 'Microsoft .Net Framework 4.6.1', 'Microsoft .NET Framework 4.6.2', 'Microsoft .NET Framework 4.7']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "100742"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-8759"
    }
  },
  "description": "Microsoft .NET Framework\u662f\u7528\u4e8eWindows\u7684\u65b0\u6258\u7ba1\u4ee3\u7801\u7f16\u7a0b\u6a21\u578b\u3002\r\n\r\nMicrosoft .NET Framework\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u4e3b\u8981\u5f71\u54cd.NET \u6846\u67b6\u7684SOAP WSDL (Web \u670d\u52a1\u63cf\u8ff0\u8bed\u8a00)\u89e3\u6790\u5668\uff0c\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u6784\u9020\u6076\u610fMicrosoft Office RTF\u6587\u6863\u5229\u7528\u8be5\u6f0f\u6d1e\u4f20\u64ad\u6076\u610f\u8f6f\u4ef6\u3002",
  "discovererName": "Alex Berry and Dhanesh Kizhakkinan of FireEye, Inc.",
  "formalWay": "\u7528\u6237\u53ef\u8054\u7cfb\u4f9b\u5e94\u5546\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-26603",
  "openTime": "2017-09-14",
  "patchDescription": "Microsoft .NET Framework\u662f\u7528\u4e8eWindows\u7684\u65b0\u6258\u7ba1\u4ee3\u7801\u7f16\u7a0b\u6a21\u578b\u3002\r\n\r\nMicrosoft .NET Framework\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u4e3b\u8981\u5f71\u54cd.NET \u6846\u67b6\u7684SOAP WSDL (Web \u670d\u52a1\u63cf\u8ff0\u8bed\u8a00)\u89e3\u6790\u5668\uff0c\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u6784\u9020\u6076\u610fMicrosoft Office RTF\u6587\u6863\u5229\u7528\u8be5\u6f0f\u6d1e\u4f20\u64ad\u6076\u610f\u8f6f\u4ef6\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Microsoft .NET Framework\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Microsoft .NET Framework 2.0",
      "Microsoft .NET Framework 3.5",
      "Microsoft .NET Framework 3.5.1",
      "Microsoft .Net Framework 4.5.2",
      "Microsoft .NET Framework 4.6",
      "Microsoft .Net Framework 4.6.1",
      "Microsoft .NET Framework 4.6.2",
      "Microsoft .NET Framework 4.7"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2017-8759\r\nhttp://www.securityfocus.com/bid/100742",
  "serverity": "\u9ad8",
  "submitTime": "2017-09-13",
  "title": "Microsoft .NET Framework\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e"
}

CVE-2017-8759 (GCVE-0-2017-8759)

Vulnerability from cvelistv5

Published

2017-09-13 01:00

Modified

2025-07-30 01:46

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Remote Code Execution

Summary

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."

References

▼	URL	Tags
	http://www.securityfocus.com/bid/100742	vdb-entry, x_refsource_BID
	https://github.com/bhdresh/CVE-2017-8759	x_refsource_MISC
	https://github.com/nccgroup/CVE-2017-8759	x_refsource_MISC
	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759	x_refsource_CONFIRM
	https://www.exploit-db.com/exploits/42711/	exploit, x_refsource_EXPLOIT-DB
	http://www.securitytracker.com/id/1039324	vdb-entry, x_refsource_SECTRACK
	https://github.com/GitHubAssessments/CVE_Assessments_01_2020	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Microsoft Corporation	Microsoft .NET Framework	Version: Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:48:22.678Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "100742",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100742"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/bhdresh/CVE-2017-8759"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/nccgroup/CVE-2017-8759"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759"
          },
          {
            "name": "42711",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/42711/"
          },
          {
            "name": "1039324",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039324"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/GitHubAssessments/CVE_Assessments_01_2020"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2017-8759",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-10T14:48:24.279703Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2021-11-03",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8759"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-94",
                "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-30T01:46:23.894Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "timeline": [
          {
            "lang": "en",
            "time": "2021-11-03T00:00:00+00:00",
            "value": "CVE-2017-8759 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Microsoft .NET Framework",
          "vendor": "Microsoft Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7"
            }
          ]
        }
      ],
      "datePublic": "2017-09-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka \".NET Framework Remote Code Execution Vulnerability.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Remote Code Execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-02-26T15:15:15.000Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "100742",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100742"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/bhdresh/CVE-2017-8759"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nccgroup/CVE-2017-8759"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759"
        },
        {
          "name": "42711",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/42711/"
        },
        {
          "name": "1039324",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039324"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/GitHubAssessments/CVE_Assessments_01_2020"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "DATE_PUBLIC": "2017-09-12T00:00:00",
          "ID": "CVE-2017-8759",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Microsoft .NET Framework",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Microsoft Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka \".NET Framework Remote Code Execution Vulnerability.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Remote Code Execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "100742",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100742"
            },
            {
              "name": "https://github.com/bhdresh/CVE-2017-8759",
              "refsource": "MISC",
              "url": "https://github.com/bhdresh/CVE-2017-8759"
            },
            {
              "name": "https://github.com/nccgroup/CVE-2017-8759",
              "refsource": "MISC",
              "url": "https://github.com/nccgroup/CVE-2017-8759"
            },
            {
              "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759",
              "refsource": "CONFIRM",
              "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759"
            },
            {
              "name": "42711",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/42711/"
            },
            {
              "name": "1039324",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039324"
            },
            {
              "name": "https://github.com/GitHubAssessments/CVE_Assessments_01_2020",
              "refsource": "MISC",
              "url": "https://github.com/GitHubAssessments/CVE_Assessments_01_2020"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2017-8759",
    "datePublished": "2017-09-13T01:00:00.000Z",
    "dateReserved": "2017-05-03T00:00:00.000Z",
    "dateUpdated": "2025-07-30T01:46:23.894Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted