CVE-2017-0100

🗓️ 17 Mar 2017 00:00:00Reported by microsoftType

cve🔗 web.nvd.nist.gov👁 141 Views🌐 WEB

"Windows HelpPane Elevation of Privilege Vulnerability in Microsoft Windows

Reporter	Title	Published	Views	Family All 27
0day.today	Microsoft Windows - COM Session Moniker Privilege Escalation (MS17-012) Exploit	16 Mar 201700:00	–	zdt
0day.today	Microsoft Windows COM Session Moniker Privilege Escalation Exploit	14 Jul 201700:00	–	zdt
BDU FSTEC	The vulnerability of the Windows operating system, which allows a hacker to increase their privileges	31 Mar 201700:00	–	bdu_fstec
Circl	CVE-2017-0100	15 Mar 201700:00	–	circl
CNVD	Microsoft Windows HelpPane Elevation of Privilege Vulnerability	16 Mar 201700:00	–	cnvd
Check Point Advisories	Microsoft Windows COM Elevation of Privilege (MS17-012: CVE-2017-0100)	14 Mar 201700:00	–	checkpoint_advisories
Cvelist	CVE-2017-0100	17 Mar 201700:00	–	cvelist
Microsoft KB	March 2017 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1	14 Mar 201707:00	–	mskb
Microsoft KB	March 2017 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2	14 Mar 201707:00	–	mskb
Microsoft KB	March 2017 Security Only Quality Update for Windows Server 2012	14 Mar 201707:00	–	mskb

NVD

Node

microsoft windows_10Match-

microsoft windows_10Match1511

microsoft windows_10Match1607

microsoft windows_7Match-sp1

microsoft windows_8.1

microsoft windows_rt_8.1Match-

microsoft windows_server_2008Matchr2

microsoft windows_server_2012Matchr2

microsoft windows_server_2016Match-

[
  {
    "product": "Windows HelpPane",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Windows HelpPane in Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0100
securitytracker	www.securitytracker.com/id/1038001
exploit-db	www.exploit-db.com/exploits/41607/
bugs	www.bugs.chromium.org/p/project-zero/issues/detail
securityfocus	www.securityfocus.com/bid/96700
blog	www.blog.inspired-sec.com/archive/2017/03/17/COM-Moniker-Privesc.html

Parameter	Position	Path	Description	CWE
session_id	path	session:{id}!new:8cec58ae-07a1-11d9-b15e-000d56bfe6ee	DCOM session moniker EoP exploit: binds to a moniker to create a DCOM object in another user session and execute an arbitrary process.	CWE-287
moniker	path	session:{id}!new:8cec58ae-07a1-11d9-b15e-000d56bfe6ee	DCOM session moniker EoP exploit: binds to a moniker to create a DCOM object in another user session and execute an arbitrary process.	CWE-287

17 Jun 2026 00:57Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.4

CVSS 37.8

EPSS0.04957

CWE-287