CVE-2018-0986

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Microsoft Windows Defender - 'mpengine.dll' Memory Corruption2018-04-05 · dos · windows · Verified

Impact

A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender, Windows Intune Endpoint Protection, Microsoft Security Essentials, Microsoft System Center Endpoint Protection, Microsoft Exchange Server, Microsoft System Center, Microsoft Forefront Endpoint Protection.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://www.securityfocus.com/bid/103593
• http://www.securitytracker.com/id/1040631
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0986
• https://www.exploit-db.com/exploits/44402/
• http://www.securityfocus.com/bid/103593
• http://www.securitytracker.com/id/1040631
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0986
• https://www.exploit-db.com/exploits/44402/