CVE-2017-0089

🗓️ 17 Mar 2017 00:00:00Reported by microsoftType

CVE-2017-0089 allows remote code execution in Uniscribe for multiple Windows versions via crafted sites.

Reporter	Title	Published	Views	Family All 25
0day.today	Microsoft Windows - Uniscribe Font Processing Heap-Based Out-of-Bounds Write in USP10!UpdateGlyphFla	20 Mar 201700:00	–	zdt
Circl	CVE-2017-0089	20 Mar 201700:00	–	circl
Check Point Advisories	Microsoft Windows Uniscribe Remote Code Execution (MS17-011: CVE-2017-0089)	14 Mar 201700:00	–	checkpoint_advisories
Cvelist	CVE-2017-0089	17 Mar 201700:00	–	cvelist
GoogleProjectZero	Notes on Windows Uniscribe Fuzzing	10 Apr 201700:00	–	googleprojectzero
Microsoft KB	March 2017 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1	14 Mar 201707:00	–	mskb
Microsoft KB	March 2017 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1	14 Mar 201707:00	–	mskb
Microsoft KB	MS17-011 and MS17-013: Description of the security update for Microsoft Graphics Component: March 14, 2017	14 Mar 201707:00	–	mskb
Microsoft KB	MS17-011: Security update for Microsoft Uniscribe: March 14, 2017	14 Mar 201700:00	–	mskb
Kaspersky	KLA10978 Multiple vulnerabilities in Windows Uniscribe	14 Mar 201700:00	–	kaspersky

NVD

Node

microsoft windows_7sp1

microsoft windows_server_2008sp2

microsoft windows_server_2008Matchr2sp1

microsoft windows_vistasp2

[
  {
    "product": "Windows Uniscribe",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0089
securitytracker	www.securitytracker.com/id/1037992
securityfocus	www.securityfocus.com/bid/96606
exploit-db	www.exploit-db.com/exploits/41652/

13 May 2026 00:24Current

7.4High risk

Vulners AI Score7.4

CVSS 38.8

CVSS 29.3

EPSS0.75159

CWE-119