CVE-2017-8542

CVE-2017-8542 is a denial-of-service vulnerability affecting the Microsoft Malware Protection Engine, present in various Microsoft Windows, Forefront, Defender, and Exchange Server versions. This flaw allows an attacker to trigger a denial of service by providing a specially crafted file, leading to system instability or unresponsiveness. Rated 5.5 (Medium) on CVSS v3.0, it requires local access and user interaction (e.g., opening a malicious file) to exploit, resulting in high availability impact but no confidentiality or integrity compromise. There is no public exploit code available, nor is it listed in CISA's KEV catalog, indicating no active exploitation. However, it has garnered some community discussion and media coverage, suggesting awareness within the cybersecurity community.