CVE-2017-11940

2017-12-0814:29:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2017-11940

microsoft

malware protection engine

remote code execution

vulnerability

windows 7

windows 8.1

windows 10

windows server 2016

microsoft exchange server 2013

microsoft exchange server 2016

7.4 High

AI Score

Confidence

High

0.147 Low

EPSS

Percentile

95.8%

JSON

VendorProductVersionCPE
microsoft corporationmalware_protection_engineMicrosoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and 2016.cpe:2.3:a:microsoft corporation:malware_protection_engine:Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and 2016.:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft corporation	malware_protection_engine	Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and 2016.	cpe:2.3:a:microsoft corporation:malware_protection_engine:Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and 2016.:::::::*