CVE-2017-0286 Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper....
MediumCVSS 5.0
EPSS 3.0%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka "Windows Graphics Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0287, CVE-2017-0288, CVE-2017-0289, CVE-2017-8531, CVE-2017-8532, and CVE-2017-8533.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2007-sp3 | No fix listed |
| Microsoft office | = 2010-sp2 | No fix listed |
| Microsoft windows 7 | All versions | No fix listed |
| Microsoft windows server 2008 | = r2-sp1 | No fix listed |
| Microsoft Uniscribe | = Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 | No fix listed |
References
- 98891 broken-link third-party-advisory vdb-entry
- portal.msrc.microsoft.com mitigation patch vendor-advisory
- 42238 exploit third-party-advisory vdb-entry