CVE-2014-2779 — Improper Input Validation in Microsoft Malware Protection Engine

CWE-20 — Improper Input Validation3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
4.2%
top 11.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Malware Protection Engine
Timeline
PublishedJun 18
Latest updateMay 17

Description

mpengine.dll in Microsoft Malware Protection Engine before 1.1.10701.0 allows remote attackers to cause a denial of service (system hang) via a crafted file.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: technet.microsoft.com ↗Patch: technet.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-wvr4-424q-2jvx: mpengine↗2022-05-17
▶
CVEList
CVE-2014-2779: mpengine↗2014-06-18
▶
CVE-2014-2779 — Improper Input Validation in Microsoft | cvebase