Rapid7 Vulnerability & Exploit Database

Microsoft Windows: CVE-2017-8620: Windows Search Remote Code Execution Vulnerability

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

Microsoft Windows: CVE-2017-8620: Windows Search Remote Code Execution Vulnerability

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
08/08/2017
Created
07/25/2018
Added
08/08/2017
Modified
09/11/2024

Description

Windows Search in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it improperly handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability".

Solution(s)

  • microsoft-windows-windows_10-1507-kb4034668
  • microsoft-windows-windows_10-1511-kb4034660
  • microsoft-windows-windows_10-1607-kb4034658
  • microsoft-windows-windows_10-1703-kb4034674
  • microsoft-windows-windows_server_2012-kb4034666
  • microsoft-windows-windows_server_2012_r2-kb4034672
  • microsoft-windows-windows_server_2016-1607-kb4034658
  • msft-kb4034034-5360eeb9-b4eb-4a56-8493-9bd56a4e494e
  • msft-kb4034034-7da4d8d5-1ac5-4398-9768-195c9fe2b3bd
  • msft-kb4034034-c749579c-91ca-4869-ba88-b3d00e84cdf1
  • msft-kb4034034-daf2c3fa-d10f-4be3-bb7a-98cfcde4148f
  • msft-kb4034666-06788602-9720-4530-adaf-3ade53334f5d
  • msft-kb4034666-3814cdd8-1132-44c8-ad17-7e66764c5f3e
  • msft-kb4034672-5e2c1fce-cac9-4bdc-b408-1c48639a054a
  • msft-kb4034672-8bfab119-d7dc-4131-8762-2281a77aa742
  • msft-kb4034679-04eaa57c-5a16-484a-aefa-b9df268e1c07
  • msft-kb4034679-07571deb-76fc-463b-9282-db65963e6fe4
  • msft-kb4034679-4d43b30e-896e-471b-a953-33a930ddd67d
  • msft-kb4034679-7c1bc577-52cb-462f-9621-5180be268589
  • msft-kb4034679-893581f0-f000-48d8-aacc-9169cbf64b23
  • msft-kb4034679-f9a211eb-8cfb-4132-b9c5-5f9e0cbb92e4

References

View more

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;