CVEvulnerability
CVE-2017-7269
CISA Known Exploited Vulnerability
Microsoft Windows Server Buffer Overflow Vulnerability — Microsoft Internet Information Services (IIS)
Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in Internet Information Services (IIS) 6.0 which allows remote attackers to execute code via a long header beginning with "If: <http://" in a PROPFIND request.
- Added to KEV
- 2021-11-03
- Remediation due
- 2022-05-03
- Ransomware use
- Unknown
- Required action
- Apply updates per vendor instructions.
- Notes
- https://nvd.nist.gov/vuln/detail/CVE-2017-7269
- Status
- Analyzed
- Published
- 2017-03-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-120
Description
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.
Affected configurations
• microsoft internet information services 6.0
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- http://www.securityfocus.com/bid/97127 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038168 Broken Link, Third Party Advisory, VDB Entry
- https://0patch.blogspot.com/2017/03/0patching-immortal-cve-2017-7269.html Exploit, Third Party Advisory
- https://github.com/danigargu/explodingcan Exploit
- https://github.com/edwardz246003/IIS_exploit Broken Link, Third Party Advisory
- https://github.com/rapid7/metasploit-framework/pull/8162 Issue Tracking, Patch
- https://medium.com/%40iraklis/number-of-internet-facing-vulnerable-iis-6-0-to-cve-2017-7269-8bd153ef5812 Exploit
- https://support.microsoft.com/en-us/help/3197835/description-of-the-security-update-for-windows-xp-and-windows-server Broken Link, Patch, Vendor Advisory
- https://www.exploit-db.com/exploits/41738/ Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/41992/ Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/97127 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038168 Broken Link, Third Party Advisory, VDB Entry
- https://0patch.blogspot.com/2017/03/0patching-immortal-cve-2017-7269.html Exploit, Third Party Advisory
- https://github.com/danigargu/explodingcan Exploit
- https://github.com/edwardz246003/IIS_exploit Broken Link, Third Party Advisory
- https://github.com/rapid7/metasploit-framework/pull/8162 Issue Tracking, Patch
- https://medium.com/%40iraklis/number-of-internet-facing-vulnerable-iis-6-0-to-cve-2017-7269-8bd153ef5812 Exploit
- https://support.microsoft.com/en-us/help/3197835/description-of-the-security-update-for-windows-xp-and-windows-server Broken Link, Patch, Vendor Advisory
- https://www.exploit-db.com/exploits/41738/ Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/41992/ Exploit, Third Party Advisory, VDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-7269 US Government Resource