CVE-2017-8759
Published
CVSS v3
7.8
HIGH
CVSS v2
9.3
HIGH
Affected
3
PROJECTS
Description
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."
Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.
GitHubNCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements
GitHub