CVE-2017-0176 A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a remote attacker to execute arbitrary code on the target compu...
HighCVSS 8.1
EPSS 45.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a remote attacker to execute arbitrary code on the target computer, provided that the computer is joined in a Windows domain and has Remote Desktop Protocol connectivity (or Terminal Services) enabled.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows server 2003 | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
| Microsoft Windows Server 2003 SP1, SP2 Windows XP - SP3 | = Microsoft Windows Server 2003 SP1, SP2 Windows XP - SP3 | No fix listed |
References
- 98550 third-party-advisory vdb-entry
- 98752 third-party-advisory vdb-entry
- blog.0patch.com
- blog.fortinet.com exploit third-party-advisory
- blogs.technet.microsoft.com patch vendor-advisory
- support.microsoft.com patch vendor-advisory