CVE-2017-0279

Windows SMB Remote Code Execution Vulnerability

CVE-2017-0279 is fixed in 27 products on 1 platform, first by KB4019473, released May 9, 2017. It is not reported as exploited. Patch Radar priority: Urgent.

Urgent
CVSS
7.0
Critical
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.1085
95th percentile

<p>A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server.</p> <p>To exploit the vulnerability, in most situations, an authenticated attacker could send a specially crafted packet to a targeted SMBv1 server.</p> <p>The security update addresses the vulnerability by correcting how SMBv1 handles these specially crafted requests.</p>

Where it's fixed

ProductFixed inFixReleased
Microsoft
Windows 10 Version 1511 for 32-bit Systems 10586.916 KB4019473 May 9, 2017
Windows 10 Version 1511 for x64-based Systems 10586.916 KB4019473 May 9, 2017
Windows 10 Version 1607 for 32-bit Systems 14393.1198 KB4019472 May 9, 2017
Windows 10 Version 1607 for x64-based Systems 14393.1198 KB4019472 May 9, 2017
Windows 10 Version 1703 for 32-bit Systems KB4016871 May 9, 2017
Windows 10 Version 1703 for x64-based Systems KB4016871 May 9, 2017
Windows 10 for 32-bit Systems 10240.17394 KB4019474 May 9, 2017
Windows 10 for x64-based Systems 10240.17394 KB4019474 May 9, 2017
Windows 7 for 32-bit Systems Service Pack 1 KB4019263 May 9, 2017
Windows 7 for 32-bit Systems Service Pack 1 KB4019264 May 9, 2017
Windows 7 for x64-based Systems Service Pack 1 KB4019263 May 9, 2017
Windows 7 for x64-based Systems Service Pack 1 KB4019264 May 9, 2017
Windows 8.1 for 32-bit systems KB4019213 May 9, 2017
Windows 8.1 for 32-bit systems KB4019215 May 9, 2017
Windows 8.1 for x64-based systems KB4019213 May 9, 2017
Windows 8.1 for x64-based systems KB4019215 May 9, 2017
Windows RT 8.1 KB4019215 May 9, 2017
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 KB4019263 May 9, 2017
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 KB4019264 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 KB4019263 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 KB4019264 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) KB4019263 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) KB4019264 May 9, 2017
Windows Server 2008 for 32-bit Systems Service Pack 2 KB4018466 May 9, 2017
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) KB4018466 May 9, 2017
Windows Server 2008 for Itanium-Based Systems Service Pack 2 KB4018466 May 9, 2017
Windows Server 2008 for x64-based Systems Service Pack 2 KB4018466 May 9, 2017
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) KB4018466 May 9, 2017
Windows Server 2012 KB4019214 May 9, 2017
Windows Server 2012 KB4019216 May 9, 2017
Windows Server 2012 (Server Core installation) KB4019214 May 9, 2017
Windows Server 2012 (Server Core installation) KB4019216 May 9, 2017
Windows Server 2012 R2 KB4019213 May 9, 2017
Windows Server 2012 R2 KB4019215 May 9, 2017
Windows Server 2012 R2 (Server Core installation) KB4019213 May 9, 2017
Windows Server 2012 R2 (Server Core installation) KB4019215 May 9, 2017
Windows Server 2016 14393.1198 KB4019472 May 9, 2017
Windows Server 2016 (Server Core installation) 14393.1198 KB4019472 May 9, 2017