Microsoft fixes Microsoft Malware Protection Engine RCE vulnerability CVE-2017-0290 found by Google

Microsoft fixes the vulnerability in the Microsoft Malware Protection Engine (CVE-2017-0290) discovered just three days by Google experts. The vulnerability affects the MsMpEng service, which runs unsandboxed with SYSTEM privileges and is accessible without authentication via Windows services such as Exchange and IIS. Google Project Zero researchers said the vulnerability can be exploited via email opening the malicious email is not necessary for exploitation or by getting the targeted user to access a specially crafted link.”]

Source: https://securityaffairs.co/wordpress/58911/hacking/microsoft-malware-protection-engine-cve-2017-0290.html