CVE-2017-8759

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-8759

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.3 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

M

icrosoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."

References
Link Resource
http://www.securityfocus.com/bid/100742 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039324 Broken Link Third Party Advisory VDB Entry
https://github.com/GitHubAssessments/CVE_Assessments_01_2020 Third Party Advisory
https://github.com/bhdresh/CVE-2017-8759 Exploit Third Party Advisory
https://github.com/nccgroup/CVE-2017-8759 Exploit Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759 Patch Vendor Advisory
https://www.exploit-db.com/exploits/42711/ Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/100742 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039324 Broken Link Third Party Advisory VDB Entry
https://github.com/GitHubAssessments/CVE_Assessments_01_2020 Third Party Advisory
https://github.com/bhdresh/CVE-2017-8759 Exploit Third Party Advisory
https://github.com/nccgroup/CVE-2017-8759 Exploit Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759 Patch Vendor Advisory
https://www.exploit-db.com/exploits/42711/ Third Party Advisory VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8759
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
OR cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
OR cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
History

22 Oct 2025, 00:16

Type Values Removed Values Added
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8759 -

21 Oct 2025, 20:17

Type Values Removed Values Added
References
  • {'url': 'https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8759', 'source': '134c704f-9b21-4f2e-91b3-4a467353bcc0'}

21 Oct 2025, 19:17

Type Values Removed Values Added
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8759 -

10 Feb 2025, 15:15

Type Values Removed Values Added
CWE CWE-94

21 Nov 2024, 03:34

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/100742 - Broken Link, Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/100742 - Broken Link, Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1039324 - Broken Link, Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1039324 - Broken Link, Third Party Advisory, VDB Entry
References () https://github.com/GitHubAssessments/CVE_Assessments_01_2020 - Third Party Advisory () https://github.com/GitHubAssessments/CVE_Assessments_01_2020 - Third Party Advisory
References () https://github.com/bhdresh/CVE-2017-8759 - Exploit, Third Party Advisory () https://github.com/bhdresh/CVE-2017-8759 - Exploit, Third Party Advisory
References () https://github.com/nccgroup/CVE-2017-8759 - Exploit, Third Party Advisory () https://github.com/nccgroup/CVE-2017-8759 - Exploit, Third Party Advisory
References () https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759 - Patch, Vendor Advisory () https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759 - Patch, Vendor Advisory
References () https://www.exploit-db.com/exploits/42711/ - Third Party Advisory, VDB Entry () https://www.exploit-db.com/exploits/42711/ - Third Party Advisory, VDB Entry

24 Jul 2024, 17:11

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/100742 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/100742 - Broken Link, Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1039324 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1039324 - Broken Link, Third Party Advisory, VDB Entry
References () https://github.com/GitHubAssessments/CVE_Assessments_01_2020 - () https://github.com/GitHubAssessments/CVE_Assessments_01_2020 - Third Party Advisory
References () https://github.com/bhdresh/CVE-2017-8759 - () https://github.com/bhdresh/CVE-2017-8759 - Exploit, Third Party Advisory
References () https://github.com/nccgroup/CVE-2017-8759 - () https://github.com/nccgroup/CVE-2017-8759 - Exploit, Third Party Advisory
CPE cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
CWE CWE-20 NVD-CWE-noinfo
First Time Microsoft windows Server 2012
Microsoft windows 10 1507
Microsoft windows Rt 8.1
Microsoft windows 10 1607
Microsoft windows 10 1511
Microsoft windows 7
Microsoft windows Server 2008
Microsoft windows 10 1703
Microsoft windows Server 2016
Microsoft windows 8.1
Information

Published : 2017-09-13 01:29

Updated : 2025-10-22 00:16

NVD link : CVE-2017-8759

Mitre link : CVE-2017-8759

CVE.ORG link : CVE-2017-8759

JSON object : View

Products Affected

microsoft

CWE
NVD-CWE-noinfo CWE-94

Improper Control of Generation of Code ('Code Injection')