Description
A remote code execution vulnerability exists in the HTTP protocol stack (HTTP.sys) that is caused when HTTP.sys improperly parses specially crafted HTTP requests. An attacker who successfully exploited this vulnerability could execute arbitrary code in the context of the System account.
This security update is rated Critical for all supported editions of Windows 7, Windows Server 2008 R2, Windows 8, Windows Server 2012, Windows 8.1, and Windows Server 2012 R2.
Remediation
Microsoft has provided a security update for this issue. It's recommended to apply this update as soon as possible.
References
Related Vulnerabilities
Nagios XI Magpie_debug.php Unauthenticated RCE
WordPress Plugin Flamingo Code Injection (1.1)
WordPress Plugin open-flash-chart-core Remote Code Execution (0.4)
Drupal Core 4.6.x Arbitrary Code Execution (4.6.0 - 4.6.7)
WordPress Plugin Ad Inserter-Ad Manager & AdSense Ads Remote Code Execution (2.4.21)