cnvd - cnvd-2017-26603

CNVD-2017-26603

Vulnerability from cnvd - Published: 2017-09-14

Title

Microsoft .NET Framework远程代码执行漏洞

Description

Microsoft .NET Framework是用于Windows的新托管代码编程模型。 Microsoft .NET Framework存在远程代码执行漏洞，主要影响.NET 框架的SOAP WSDL (Web 服务描述语言)解析器，攻击者可通过构造恶意Microsoft Office RTF文档利用该漏洞传播恶意软件。

Severity

高

Patch Name

Microsoft .NET Framework远程代码执行漏洞的补丁

Patch Description

Formal description

用户可联系供应商获得补丁信息： https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759

Reference

https://nvd.nist.gov/vuln/detail/CVE-2017-8759 http://www.securityfocus.com/bid/100742

Impacted products

Name
['Microsoft .NET Framework 2.0', 'Microsoft .NET Framework 3.5', 'Microsoft .NET Framework 3.5.1', 'Microsoft .Net Framework 4.5.2', 'Microsoft .NET Framework 4.6', 'Microsoft .Net Framework 4.6.1', 'Microsoft .NET Framework 4.6.2', 'Microsoft .NET Framework 4.7']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "100742"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-8759"
    }
  },
  "description": "Microsoft .NET Framework\u662f\u7528\u4e8eWindows\u7684\u65b0\u6258\u7ba1\u4ee3\u7801\u7f16\u7a0b\u6a21\u578b\u3002\r\n\r\nMicrosoft .NET Framework\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u4e3b\u8981\u5f71\u54cd.NET \u6846\u67b6\u7684SOAP WSDL (Web \u670d\u52a1\u63cf\u8ff0\u8bed\u8a00)\u89e3\u6790\u5668\uff0c\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u6784\u9020\u6076\u610fMicrosoft Office RTF\u6587\u6863\u5229\u7528\u8be5\u6f0f\u6d1e\u4f20\u64ad\u6076\u610f\u8f6f\u4ef6\u3002",
  "discovererName": "Alex Berry and Dhanesh Kizhakkinan of FireEye, Inc.",
  "formalWay": "\u7528\u6237\u53ef\u8054\u7cfb\u4f9b\u5e94\u5546\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-26603",
  "openTime": "2017-09-14",
  "patchDescription": "Microsoft .NET Framework\u662f\u7528\u4e8eWindows\u7684\u65b0\u6258\u7ba1\u4ee3\u7801\u7f16\u7a0b\u6a21\u578b\u3002\r\n\r\nMicrosoft .NET Framework\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u4e3b\u8981\u5f71\u54cd.NET \u6846\u67b6\u7684SOAP WSDL (Web \u670d\u52a1\u63cf\u8ff0\u8bed\u8a00)\u89e3\u6790\u5668\uff0c\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u6784\u9020\u6076\u610fMicrosoft Office RTF\u6587\u6863\u5229\u7528\u8be5\u6f0f\u6d1e\u4f20\u64ad\u6076\u610f\u8f6f\u4ef6\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Microsoft .NET Framework\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Microsoft .NET Framework 2.0",
      "Microsoft .NET Framework 3.5",
      "Microsoft .NET Framework 3.5.1",
      "Microsoft .Net Framework 4.5.2",
      "Microsoft .NET Framework 4.6",
      "Microsoft .Net Framework 4.6.1",
      "Microsoft .NET Framework 4.6.2",
      "Microsoft .NET Framework 4.7"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2017-8759\r\nhttp://www.securityfocus.com/bid/100742",
  "serverity": "\u9ad8",
  "submitTime": "2017-09-13",
  "title": "Microsoft .NET Framework\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e"
}

CVE-2017-8759 (GCVE-0-2017-8759)

Vulnerability from cvelistv5 – Published: 2017-09-13 01:00 – Updated: 2025-10-21 23:55

Summary

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."

Severity ?

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Remote Code Execution

Assigner

microsoft

References

URL

Tags

	http://www.securityfocus.com/bid/100742	vdb-entryx_refsource_BID
	https://github.com/bhdresh/CVE-2017-8759	x_refsource_MISC
	https://github.com/nccgroup/CVE-2017-8759	x_refsource_MISC
	https://portal.msrc.microsoft.com/en-US/security-…	x_refsource_CONFIRM
	https://www.exploit-db.com/exploits/42711/	exploitx_refsource_EXPLOIT-DB
	http://www.securitytracker.com/id/1039324	vdb-entryx_refsource_SECTRACK
	https://github.com/GitHubAssessments/CVE_Assessme…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Microsoft Corporation	Microsoft .NET Framework	Affected: Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:48:22.678Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "100742",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100742"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/bhdresh/CVE-2017-8759"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/nccgroup/CVE-2017-8759"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759"
          },
          {
            "name": "42711",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/42711/"
          },
          {
            "name": "1039324",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039324"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/GitHubAssessments/CVE_Assessments_01_2020"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2017-8759",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-10T14:48:24.279703Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2021-11-03",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8759"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-94",
                "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T23:55:34.790Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8759"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2021-11-03T00:00:00+00:00",
            "value": "CVE-2017-8759 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Microsoft .NET Framework",
          "vendor": "Microsoft Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7"
            }
          ]
        }
      ],
      "datePublic": "2017-09-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka \".NET Framework Remote Code Execution Vulnerability.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Remote Code Execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-02-26T15:15:15.000Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "100742",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100742"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/bhdresh/CVE-2017-8759"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nccgroup/CVE-2017-8759"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759"
        },
        {
          "name": "42711",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/42711/"
        },
        {
          "name": "1039324",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039324"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/GitHubAssessments/CVE_Assessments_01_2020"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "DATE_PUBLIC": "2017-09-12T00:00:00",
          "ID": "CVE-2017-8759",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Microsoft .NET Framework",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Microsoft Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka \".NET Framework Remote Code Execution Vulnerability.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Remote Code Execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "100742",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100742"
            },
            {
              "name": "https://github.com/bhdresh/CVE-2017-8759",
              "refsource": "MISC",
              "url": "https://github.com/bhdresh/CVE-2017-8759"
            },
            {
              "name": "https://github.com/nccgroup/CVE-2017-8759",
              "refsource": "MISC",
              "url": "https://github.com/nccgroup/CVE-2017-8759"
            },
            {
              "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759",
              "refsource": "CONFIRM",
              "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759"
            },
            {
              "name": "42711",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/42711/"
            },
            {
              "name": "1039324",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039324"
            },
            {
              "name": "https://github.com/GitHubAssessments/CVE_Assessments_01_2020",
              "refsource": "MISC",
              "url": "https://github.com/GitHubAssessments/CVE_Assessments_01_2020"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2017-8759",
    "datePublished": "2017-09-13T01:00:00.000Z",
    "dateReserved": "2017-05-03T00:00:00.000Z",
    "dateUpdated": "2025-10-21T23:55:34.790Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2017-26603

CVE-2017-8759 (GCVE-0-2017-8759)

Tags

Sightings

Nomenclature