HTTP Protocol Stack Remote Code Execution Vulnerability (DOS)
Impact: High
Description
A vulnerability in Microsoft Windows HTTP Protocol Stack (HTTP.sys) allows remote attackers to execute code or cause a crash on the host OS.
Recommendation
Update Microsoft Windows
References
- Microsoft: HTTP Protocol Stack Remote Code Execution Vulnerability
- CVE-2021-31166
- OWASP 2017-A9
- OWASP 2021-A6
👉 You might also like:
Drupal 'Drupalgeddon2' Remote Code Execution - CVE-2018-7600
Nginx Null Byte Code Execution - Vulnerability
WordPress Plugin Smart Google Code Inserter 3.5 SQLI - CVE-2018-3810
Apache 2.4.49 Path Traversal and RCE - CVE-2021-41773, CVE-2021-42013
Last updated on July 07, 2021