http://www.securityfocus.com/bid/98330

http://www.securitytracker.com/id/1038419

http://www.securitytracker.com/id/1038420

https://0patch.blogspot.si/2017/05/0patching-worst-windows-remote-code.html

https://arstechnica.com/information-technology/2017/05/windows-defender-nscript-remote-vulnerability/

https://bugs.chromium.org/p/project-zero/issues/detail?id=1252

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0290

https://technet.microsoft.com/library/security/4022344

https://twitter.com/natashenka/status/861748397409058816

https://www.exploit-db.com/exploits/41975/

OR
     *cpe:2.3:o:microsoft:windows_server_2012:r2:-:-:*:*:*:*:*

OR
     *cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

https://www.exploit-db.com/exploits/41975/ [No Types Assigned]

http://www.securitytracker.com/id/1038419 [No Types Assigned]

http://www.securitytracker.com/id/1038420 [No Types Assigned]

https://0patch.blogspot.si/2017/05/0patching-worst-windows-remote-code.html [No Types Assigned]

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

CWE-119

AND
     OR
          *cpe:2.3:a:microsoft:forefront_security:-:*:*:*:*:*:*:*
          *cpe:2.3:a:microsoft:malware_protection_engine:1.1.13701.0:*:*:*:*:*:*:* (and previous)
          *cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
          cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*
          cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
          cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*
          cpe:2

http://www.securityfocus.com/bid/98330 No Types Assigned

http://www.securityfocus.com/bid/98330 Third Party Advisory, VDB Entry

https://arstechnica.com/information-technology/2017/05/windows-defender-nscript-remote-vulnerability/ No Types Assigned

https://arstechnica.com/information-technology/2017/05/windows-defender-nscript-remote-vulnerability/ Press/Media Coverage, Third Party Advisory

https://bugs.chromium.org/p/project-zero/issues/detail?id=1252 No Types Assigned

https://bugs.chromium.org/p/project-zero/issues/detail?id=1252 Exploit, Third Party Advisory

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0290 No Types Assigned

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0290 Vendor Advisory

https://technet.microsoft.com/library/security/4022344 No Types Assigned

https://technet.microsoft.com/library/security/4022344 Patch, Vendor Advisory

https://twitter.com/natashenka/status/861748397409058816 No Types Assigned

https://twitter.com/natashenka/status/861748397409058816 Exploit, Third Party Advisory

NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within any file scanned by this engine.

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 does not properly scan a specially crafted file leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability."

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0290 [No Types Assigned]

http://www.securityfocus.com/bid/98330 [No Types Assigned]

https://arstechnica.com/information-technology/2017/05/windows-defender-nscript-remote-vulnerability/ [No Types Assigned]