CVE
- Id
- 104089
- CVE No.
- CVE-2017-7269
- Status
- Candidate
- Description
- Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.
- Phase
- Assigned (20170326)
- Votes
- None (candidate not yet proposed)
- Comments