CVE-2017-8759

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
Microsoft Corporation	Microsoft .NET Framework	Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7

References

http://www.securityfocus.com/bid/100742Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039324Broken Link, Third Party Advisory, VDB Entry
https://github.com/GitHubAssessments/CVE_Assessments_01_2020Third Party Advisory
https://github.com/bhdresh/CVE-2017-8759Exploit, Third Party Advisory
https://github.com/nccgroup/CVE-2017-8759Exploit, Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759Patch, Vendor Advisory
https://www.exploit-db.com/exploits/42711/Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/100742Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039324Broken Link, Third Party Advisory, VDB Entry
https://github.com/GitHubAssessments/CVE_Assessments_01_2020Third Party Advisory
https://github.com/bhdresh/CVE-2017-8759Exploit, Third Party Advisory
https://github.com/nccgroup/CVE-2017-8759Exploit, Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759Patch, Vendor Advisory
https://www.exploit-db.com/exploits/42711/Third Party Advisory, VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8759US Government Resource

Timeline

Published: Sep 13, 2017
Last modified: Jun 17, 2026
Added to CISA KEV: Nov 3, 2021
NVD status: Analyzed

Related CVEs from 2017

CVE-2017-87606.1An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in courier/1000@/index.html with the auth_params paramete CVE-2017-87614.3In OpenStack Swift through 2.10.1, 2.11.0 through 2.13.0, and 2.14.0, the proxy-server logs full tempurl paths, potentially leaking reusable CVE-2017-87625.4GeniXCMS 1.0.2 has XSS triggered by an authenticated user who submits a page, as demonstrated by a crafted oncut attribute in a B element.CVE-2017-87636.1Cross-site scripting (XSS) vulnerability in modules/Base/Box/check_for_new_version.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows re CVE-2017-87656.5The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion v CVE-2017-87667.8IrfanView version 4.44 (32bit) allows remote attackers to execute code via a crafted .mov file, because of a "User Mode Write AV near NULL" CVE-2017-87689.8Atlassian SourceTree v2.5c and prior are affected by a command injection in the handling of the sourcetree:// scheme. It will lead to arbitr CVE-2017-87694.6Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for cleartext storage of files (Audio, Documents, Images, Video, an CVE-2017-87707.5There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device vi CVE-2017-87719.8On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username:"r CVE-2017-87729.8On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username:"r CVE-2017-87739.8Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Out