Loading
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.
Use CWE-120, Microsoft vendor hub and Internet Information Services product page to widen CVE-2017-7269 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2010-3972, CVE-2010-2730 and CVE-2009-1122 for nearby disclosures in the same product family. Additional editorial context is available in Weekly Security Roundup: Navigating the April 2026 Threat Landscape and Critical Framework Exploits.