Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2017-0113
HistoryMar 17, 2017 - 12:59 a.m.

CVE-2017-0113

2017-03-1700:59:03
CWE-200
[email protected]
web.nvd.nist.gov
59
cve-2017-0113
uniscribe
microsoft windows
information disclosure
vulnerability
nvd
security advisory

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

4.5 Medium

AI Score

Confidence

High

0.083 Low

EPSS

Percentile

94.4%

JSON

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka “Uniscribe Information Disclosure Vulnerability.” CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128.

Affected configurations

Vulners
NVD
Node
microsoft_corporationwindows_uniscribe

CNA Affected

[
  {
    "product": "Windows Uniscribe",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1"
      }
    ]
  }
]

Related

prion 21
nvd 21
cvelist 21
cve 20
zdt 2
kaspersky 3
openvas 1
nessus 1
mskb 11
symantec 21
mscve 21
checkpoint_advisories 2
googleprojectzero 1
prion
prion
Information disclosure
2017-03-17 00:59:00
Information disclosure
2017-03-17 00:59:00
Information disclosure
2017-03-17 00:59:00
nvd
nvd
CVE-2017-0115
2017-03-17 00:59:03
CVE-2017-0122
2017-03-17 00:59:03
CVE-2017-0091
2017-03-17 00:59:02
cvelist
cvelist
CVE-2017-0118
2017-03-17 00:00:00
CVE-2017-0125
2017-03-17 00:00:00
CVE-2017-0119
2017-03-17 00:00:00
cve
cve
CVE-2017-0111
2017-03-17 00:59:03
CVE-2017-0128
2017-03-17 00:59:03
CVE-2017-0085
2017-03-17 00:59:02
zdt
zdt
Microsoft Windows - Uniscribe Font Processing Multiple Heap-Based Out-of-Bounds and Wild Reads (MS17
2017-03-20 00:00:00
Microsoft Windows - Uniscribe Font Processing Out-of-Bounds Read in usp10!otlChainRuleSetTable::rule
2017-03-20 00:00:00
kaspersky
kaspersky
KLA10978 Multiple vulnerabilities in Windows Uniscribe
2017-03-14 00:00:00
KLA11902 Multiple vulnerabilities in Microsoft Products (ESU)
2017-03-14 00:00:00
KLA10979 Multiple vulnerabilities in Microsoft Windows
2017-03-14 00:00:00
openvas
openvas
Microsoft Uniscribe Multiple Vulnerabilities (4013076)
2017-03-15 00:00:00
nessus
nessus
MS17-011: Security Update for Microsoft Uniscribe (4013076)
2017-03-14 00:00:00
mskb
mskb
MS17-011 and MS17-013: Description of the security update for Microsoft Graphics Component: March 14, 2017
2017-03-14 07:00:00
MS17-011: Security update for Microsoft Uniscribe: March 14, 2017
2017-03-14 00:00:00
March 2017 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1
2017-03-14 07:00:00
symantec
symantec
Microsoft Windows Uniscribe CVE-2017-0113 Information Disclosure Vulnerability
2017-03-14 00:00:00
Microsoft Windows Uniscribe CVE-2017-0123 Information Disclosure Vulnerability
2017-03-14 00:00:00
Microsoft Windows Uniscribe CVE-2017-0121 Information Disclosure Vulnerability
2017-03-14 00:00:00
mscve
mscve
Windows Uniscribe Information Disclosure Vulnerability
2017-03-14 07:00:00
Windows Uniscribe Information Disclosure Vulnerability
2017-03-14 07:00:00
Windows Uniscribe Information Disclosure Vulnerability
2017-03-14 07:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows Uniscribe Information Disclosure (MS17-011: CVE-2017-0121)
2017-03-14 00:00:00
Microsoft Windows Uniscribe Information Disclosure (MS17-011: CVE-2017-0085)
2017-04-16 00:00:00
googleprojectzero
googleprojectzero
Notes on Windows Uniscribe Fuzzing
2017-04-10 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

4.5 Medium

AI Score

Confidence

High

0.083 Low

EPSS

Percentile

94.4%

JSON
Related for CVE-2017-0113
prion21nvd21cvelist21cve20zdt2kaspersky3openvas1nessus1mskb11symantec21mscve21checkpoint_advisories2googleprojectzero1