CVE-2017-8461: microsoft corporation microsoft windows

EPSS trend

Probability

20.41%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 20.41% on 19-09-2026

19-09-202619-10-2026

EPSS score

20.41%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
MetasploitremoteUnverified
Microsoft Windows RRAS Service MIBEntryGet Overflow
exploit/windows/smb/smb_rras_erraticgopher
Maturity: poc

References

4 links

support.microsoft.com/en-us/help/4024323/security-update-of-windows-xp-and-windows-server-2003X Refsource CONFIRMPatchVendor Advisory
www.securityfocus.com/bid/99012VDB EntryX Refsource BIDThird Party Advisory
www.securitytracker.com/id/1038701VDB EntryX Refsource SECTRACKThird Party Advisory
packetstormsecurity.com/files/161672/Microsoft-Windows-RRAS-Service-MIBEntryGet-Overflow.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry

Related vulnerabilities

CVE-2003-1048microsoftinternet_explorer+726.63%22y ago21-07-2004 04:00Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.CVE-2003-0907microsoftwindows_server_2003+121.85%22y ago16-04-2004 04:00Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe.CVE-2003-0904microsoftexchange_server+28.16%22y ago08-01-2004 05:00Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed.CVE-2013-1263microsoftwindows_xp1.47%13y ago13-02-2013 11:00Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.CVE-2013-1252microsoftwindows_xp1.47%13y ago13-02-2013 11:00Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.CVE-2013-1269microsoftwindows_xp1.52%13y ago13-02-2013 11:00Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.

All vulnerabilities inmicrosoft windows windows_server_2003 windows_xp

CVE-2017-8461: microsoft corporation microsoft windows

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References