CVE-2017-0045 Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse crafted .msdvd files, which allows attackers to obtain information to compromise a...
MediumCVSS 5.5
EPSS 6.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse crafted .msdvd files, which allows attackers to obtain information to compromise a target system, aka "Windows DVD Maker Cross-Site Request Forgery Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 7 | All versions | No fix listed |
| Microsoft windows server 2008 | All versions | No fix listed |
| Microsoft windows server 2008 | = r2-sp1 | No fix listed |
| Microsoft windows vista | All versions | No fix listed |
| Microsoft Windows DVD Maker | = Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 | No fix listed |
References
- hyp3rlinx.altervista.org exploit third-party-advisory
- 96103 third-party-advisory vdb-entry
- 1038015 vdb-entry
- portal.msrc.microsoft.com patch vendor-advisory
- 41619 exploit