Improper input validation in Microsoft Malware Protection Engine
CVE-2014-2779
mpengine.dll in Microsoft Malware Protection Engine before 1.1.10701.0 allows remote attackers to cause a denial of service (system hang) via a crafted file.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.134 (96.0th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Malware_protection_engine
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (VDB Entry, vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (x_refsource_SECUNIA, third-party-advisory)
- secure@microsoft.com (VDB Entry, vdb-entry, x_refsource_BID)
- secure@microsoft.com (x_refsource_CONFIRM, Patch, Mitigation, Vendor Advisory)