CVE-2017-0176
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
8.5 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.826 High
EPSS
Percentile
98.4%
A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a remote attacker to execute arbitrary code on the target computer, provided that the computer is joined in a Windows domain and has Remote Desktop Protocol connectivity (or Terminal Services) enabled.
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_server_2003 | * | cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:* |
References
www.securityfocus.com/bid/98550
www.securityfocus.com/bid/98752
blog.0patch.com/2017/06/a-quick-analysis-of-microsofts.html
blog.fortinet.com/2017/05/11/deep-analysis-of-esteemaudit
blogs.technet.microsoft.com/msrc/2017/04/14/protecting-customers-and-evaluating-risk/
support.microsoft.com/en-us/help/4022747/security-update-for-windows-xp-and-windows-server-2003
Related
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
8.5 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.826 High
EPSS
Percentile
98.4%