Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Msft | — | Security Update for Windows XP Service Pack 3 (KB3197835)Security Update for WES09 and POSReady 2009 (KB3197835)Security Update for Windows XP SP3 for XPe and WEPOS (KB3197835)Security Update for Windows XP for x64-based Systems (KB3197835)Security Update for Windows Server 2003 for x64-based Systems (KB3197835)Security Update for Windows Server 2003 (KB3197835) | Jun 14, 2017 | Jun 14, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub