CVE:CVE-2017-8558
CNNVD:CNNVD-201706-1069
Microsoft Endpoint Protection等都是美国微软（Microsoft）公司的产品。Microsoft Endpoint Protection是一款免费杀毒软件；Windows Defender是一套用来移除、隔离和预防间谍软件的杀毒软件。Malware Protection Engine是其中的一个恶意软件保护引擎。
多款Microsoft产品中的Malware Protection Engine存在远程代码执行漏洞，该漏洞源于程序没有正确的扫描特制的文件。远程攻击者可利用该漏洞造成内存损坏。以下产品和版本受到影响：Microsoft Endpoint Protection；Microsoft Forefront Endpoint Protection；Microsoft Forefront Endpoint Protection 2010；Microsoft Security Essentials；Windows Defender；Windows Intune Endpoint Protection。
solution:Upgrade microsoft windows_defender to a higher version than -; Upgrade microsoft endpoint_protection to a higher version than -; Upgrade microsoft forefront_endpoint_protection to a higher version than -,2010,and avoid the version 2010; Upgrade microsoft security_essentials to a higher version than -; Upgrade microsoft windows_intune_endpoint_protection to a higher version than -