CVE-2017-8683 Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server...
MediumCVSS 5.5
EPSS 22.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an attacker to execute remote code by the way it handles embedded fonts, aka "Win32k Graphics Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8682.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 10 | All versions | No fix listed |
| Microsoft windows 10 | = 1511 | No fix listed |
| Microsoft windows 10 | = 1607 | No fix listed |
| Microsoft windows 10 | = 1703 | No fix listed |
| Microsoft windows 7 | All versions | No fix listed |
| Microsoft windows 8.1 | All versions | No fix listed |
| Microsoft windows server 2008 | All versions | No fix listed |
| Microsoft windows server 2008 | = r2-sp1 | No fix listed |
| Microsoft Windows Server 2012 | All versions | No fix listed |
| Microsoft Windows Server 2012 | = r2 | No fix listed |
| Microsoft Windows Server 2016 | All versions | No fix listed |
| Microsoft Windows graphics | = Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 | No fix listed |
References
- 100781 third-party-advisory vdb-entry
- 1039338 third-party-advisory vdb-entry
- portal.msrc.microsoft.com patch vendor-advisory
- 42746 exploit third-party-advisory vdb-entry