Lucene search

K
cve[email protected]CVE-2017-20190
HistoryMar 27, 2024 - 12:15 a.m.

CVE-2017-20190

2024-03-2700:15:07
web.nvd.nist.gov
28
cve-2017-20190
unicode combining characters
zalgo text attack
windows 8
windows 11
temporary performance degradation
computational cost
unicode data vulnerability

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.8%

Some Microsoft technologies as used in Windows 8 through 11 allow a temporary client-side performance degradation during processing of multiple Unicode combining characters, aka a β€œZalgo text” attack. NOTE: third parties dispute whether the computational cost of interpreting Unicode data should be considered a vulnerability.

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.8%

Related for CVE-2017-20190