CVE-2017-8537 is a denial-of-service vulnerability in the Microsoft Malware Protection Engine, affecting various Microsoft products including Forefront, Defender, Exchange Server, and multiple Windows operating systems. The vulnerability arises from improper scanning of specially crafted files, which can lead to a system crash. Rated with a CVSS score of 5.5 (Medium), this vulnerability has a local attack vector and requires user interaction (e.g., opening a malicious file). A successful exploit would result in a denial of service, impacting system availability. While not listed on the CISA KEV catalog, exploit code for multiple crashes related to malformed file scanning has been published on ExploitDB. The vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for exploitation, though active exploitation is not confirmed.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:microsoft:endpoint_protection:-:*:*:*:*:*:*:* | ||
2013CPE matchmatch criteria | cpe:2.3:a:microsoft:exchange_server:2013:-:*:*:*:*:*:* | ||
2016CPE matchmatch criteria | cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:microsoft:forefront_endpoint_protection:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.