MS15-034 – Range Header Integer Overflow

This report details Microsoft vulnerability MS15-034 in HTTP.sys where an oversized Range header can overflow a 64-bit integer, potentially enabling kernel-level memory corruption and remote code execution on IIS/HTTP.sys-using systems; it includes detection methods (netstat, curl, a Python PoC), a local patch-check command (wmic qfe | find "KB3042553"), lists affected Windows versions, and advises immediate patching of public-facing assets.