ByteOS Network

CVE Vulnerability Details :

CVE-2015-1635

PUBLISHED

More Info Official Page

Assigner-microsoft

Assigner Org ID-f38d906d-7342-40ea-92c1-6c4a2c6478c8

View Known Exploited Vulnerability (KEV) details

Published At-14 Apr, 2015 | 20:00

Updated At-22 Oct, 2025 | 00:05

▼CVE Numbering Authority (CNA)

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-034	vendor-advisory x_refsource_MS
https://www.exploit-db.com/exploits/36773/	exploit x_refsource_EXPLOIT-DB
http://www.osvdb.org/120629	vdb-entry x_refsource_OSVDB
http://www.securitytracker.com/id/1032109	vdb-entry x_refsource_SECTRACK
http://www.securityfocus.com/bid/74013	vdb-entry x_refsource_BID
https://www.exploit-db.com/exploits/36776/	exploit x_refsource_EXPLOIT-DB
http://packetstormsecurity.com/files/131463/Microsoft-Windows-HTTP.sys-Proof-Of-Concept.html	x_refsource_MISC

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-034

Resource:

vendor-advisory

x_refsource_MS

Hyperlink: https://www.exploit-db.com/exploits/36773/

Resource:

exploit

x_refsource_EXPLOIT-DB

Hyperlink: http://www.osvdb.org/120629

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://www.securitytracker.com/id/1032109

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.securityfocus.com/bid/74013

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://www.exploit-db.com/exploits/36776/

Resource:

exploit

x_refsource_EXPLOIT-DB

Hyperlink: http://packetstormsecurity.com/files/131463/Microsoft-Windows-HTTP.sys-Proof-Of-Concept.html

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-034	vendor-advisory x_refsource_MS x_transferred
https://www.exploit-db.com/exploits/36773/	exploit x_refsource_EXPLOIT-DB x_transferred
http://www.osvdb.org/120629	vdb-entry x_refsource_OSVDB x_transferred
http://www.securitytracker.com/id/1032109	vdb-entry x_refsource_SECTRACK x_transferred
http://www.securityfocus.com/bid/74013	vdb-entry x_refsource_BID x_transferred
https://www.exploit-db.com/exploits/36776/	exploit x_refsource_EXPLOIT-DB x_transferred
http://packetstormsecurity.com/files/131463/Microsoft-Windows-HTTP.sys-Proof-Of-Concept.html	x_refsource_MISC x_transferred

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-034

Resource:

vendor-advisory

x_refsource_MS

x_transferred

Hyperlink: https://www.exploit-db.com/exploits/36773/

Resource:

exploit

x_refsource_EXPLOIT-DB

x_transferred

Hyperlink: http://www.osvdb.org/120629

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: http://www.securitytracker.com/id/1032109

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.securityfocus.com/bid/74013

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://www.exploit-db.com/exploits/36776/

Resource:

exploit

x_refsource_EXPLOIT-DB

x_transferred

Hyperlink: http://packetstormsecurity.com/files/131463/Microsoft-Windows-HTTP.sys-Proof-Of-Concept.html

Resource:

x_refsource_MISC

x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-94	CWE-94 Improper Control of Generation of Code ('Code Injection')

Type: CWE

CWE ID: CWE-94

Description: CWE-94 Improper Control of Generation of Code ('Code Injection')

Metrics

Version	Base score	Base severity	Vector
3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Metrics Other Info

kev

dateAdded:

2022-02-10

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1635

Timeline

Event	Date
CVE-2015-1635 added to CISA KEV	2022-02-10 00:00:00

Event: CVE-2015-1635 added to CISA KEV

Date: 2022-02-10 00:00:00

References

Hyperlink	Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1635	government-resource

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1635

Resource:

government-resource

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References