What’s Vulnerable › Vulnerabilities

CVE-2017-7269: Microsoft Windows Server Buffer Overflow Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2021-11-03
• EPSS: 99.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-03-27 · updated 2026-06-17
• Weakness: CWE-120

Description

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.

Affected products

• Microsoft IIS: 6.0

References

• http://www.securityfocus.com/bid/97127
• http://www.securitytracker.com/id/1038168
• https://0patch.blogspot.com/2017/03/0patching-immortal-cve-2017-7269.html
• https://github.com/danigargu/explodingcan
• https://github.com/edwardz246003/IIS_exploit
• https://github.com/rapid7/metasploit-framework/pull/8162
• https://medium.com/%40iraklis/number-of-internet-facing-vulnerable-iis-6-0-to-cve-2017-7269-8bd153ef5812
• https://support.microsoft.com/en-us/help/3197835/description-of-the-security-update-for-windows-xp-and-windows-server
• https://www.exploit-db.com/exploits/41738/
• https://www.exploit-db.com/exploits/41992/
• http://www.securityfocus.com/bid/97127
• http://www.securitytracker.com/id/1038168

Get alerted when CVE-2017-7269 or the next vulnerability affects your stack