CVE-2017-7269
Microsoft Windows Server Buffer Overflow Vulnerability
CVSS
—
No CVSS
EPSS
99.8%
p100
KEV
YES
Nov 3, 2021
Exploit Today
80
0-100
Published: — · Last modified: —
99.8%EPSS · 30 days99.8%
2026-06-302026-07-16
Product
Microsoft / Internet Information Services (IIS)
Vulnerability
Microsoft Windows Server Buffer Overflow Vulnerability
Added to KEV
Nov 3, 2021
Remediate by
May 3, 2022
Known ransomware use
No
Summary description
Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in Internet Information Services (IIS) 6.0 which allows remote attackers to execute code via a long header beginning with "If: <http://" in a PROPFIND request.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2017-7269
No related CVEs by CWE or product.