CVE-2017-7269
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet...
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.
- Record
CVE-2017-7269- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE List
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.
- Record
CVE-2017-7269- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
EUVDEUVD-2017-16299
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.
- Record
EUVD-2017-16299- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-fj79-76j8-9vjm
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet...
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.
- Record
GHSA-fj79-76j8-9vjm- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119, CWE-120
- Updated
- 2026-11-02
CISA KEV No score
Microsoft Windows Server Buffer Overflow Vulnerability
Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in Internet Information Services (IIS) 6.0 which allows remote attackers to execute code via a long header beginning with "If: <http://" in a PROPFIND request.
- Record
CVE-2017-7269- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | Microsoft IIS WebDav ScStoragePathFromUrl Overflow | 2017-03-26 |
| Exploit-DB | Microsoft IIS 6.0 - WebDAV 'ScStoragePathFromUrl' Remote Buffer Overflow | 2017-03-27 |
| PoC in GitHub | caicai1355/CVE-2017-7269-exploit | 2017-03-29 |
| PoC in GitHub | eliuha/webdav_exploit | 2017-03-29 |
| PoC in GitHub | lcatro/CVE-2017-7269-Echo-PoC | 2017-03-29 |
| PoC in GitHub | whiteHat001/cve-2017-7269picture | 2017-03-30 |
| PoC in GitHub | zcgonvh/cve-2017-7269 | 2017-03-30 |
| PoC in GitHub | g0rx/iis6-exploit-2017-CVE-2017-7269 | 2017-04-05 |
| PoC in GitHub | slimpagey/IIS_6.0_WebDAV_Ruby | 2017-04-06 |
| PoC in GitHub | homjxi0e/cve-2017-7269 | 2017-04-13 |
Show 13 moreShow less
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft IIS - WebDav 'ScStoragePathFromUrl' Remote Overflow (Metasploit) | 2017-05-11 |
| PoC in GitHub | zcgonvh/cve-2017-7269-tool | 2017-05-16 |
| PoC in GitHub | Al1ex/CVE-2017-7269 | 2018-04-28 |
| PoC in GitHub | ThanHuuTuan/CVE-2017-7269 | 2019-08-09 |
| PoC in GitHub | h3x0v3rl0rd/CVE-2017-7269 | 2021-07-16 |
| PoC in GitHub | denchief1/CVE-2017-7269 | 2022-08-29 |
| PoC in GitHub | Cappricio-Securities/CVE-2017-7269 | 2024-05-19 |
| PoC in GitHub | VanishedPeople/CVE-2017-7269 | 2024-08-07 |
| PoC in GitHub | geniuszly/CVE-2017-7269 | 2024-10-06 |
| PoC in GitHub | nika0x38/CVE-2017-7269 | 2025-09-30 |
| PoC in GitHub | Killian0713/Assignement_3-CVE-2017-7269 | 2026-01-19 |
| PoC in GitHub | Admin2099/Penetration-Testing-Assessment-23-04-2026 | 2026-06-16 |
| Nuclei | Windows Server 2003 & IIS 6.0 - Remote Code Execution |
History
| Recorded | Changed | Sources |
|---|---|---|
| exploitation, exploits | ||
| first indexed | CVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, Nuclei, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-7269 is a critical vulnerability (CVSS 9.8) in Microsoft Internet Information Services (iis), published March 27, 2017. CISA lists it as known to be exploited, since November 3, 2021. EUVD reports exploitation since November 3, 2021. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 99.8%, the 99th percentile. No source names a fixed version.
References
exploit-db.com/exploits/41992
securityfocus.com/bid/97127
medium.com/%40iraklis/number-of-internet-facing-vulnerable-iis-6-0-to-cve-2017-7269-8bd153ef5812
github.com/rapid7/metasploit-framework/pull/8162
securitytracker.com/id/1038168
Show 8 moreShow less
support.microsoft.com/en-us/help/3197835/description-of-the-security-update-for-windows-xp-and-windows-server
0patch.blogspot.com/2017/03/0patching-immortal-cve-2017-7269.html
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-7269
nvd.nist.gov/vuln/detail/CVE-2017-7269