Main Vulnerability Database Vulnerabilities #VU7459

Memory corruption in Microsoft Windows and Windows Server - CVE-2017-8584

Published: July 11, 2017 / Updated: July 11, 2017

Vulnerability identifier: #VU7459

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-8584

CWE-ID: CWE-119

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to memory corruption when processing WiFi packets in HoloLens. A remote unauthenticated attacker can send a specially crafted WiFi packet to the affected device and execute arbitrary code.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable device.

Affected software

Microsoft Windows
Windows Server

How to mitigate CVE-2017-8584

Install updates from vendor's website.

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8584

Related Security Bulletins