CVE-2017-0089

🗓️ 17 Mar 2017 00:00:00Reported by microsoftType

Uniscribe in MicrosoftWindowsVistaSP2, WindowsServer2008SP2 and R2 SP1, and Windows7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability.

Reporter	Title	Published	Views	Family All 25
0day.today	Microsoft Windows - Uniscribe Font Processing Heap-Based Out-of-Bounds Write in USP10!UpdateGlyphFla	20 Mar 201700:00	–	zdt
Circl	CVE-2017-0089	20 Mar 201700:00	–	circl
Check Point Advisories	Microsoft Windows Uniscribe Remote Code Execution (MS17-011: CVE-2017-0089)	14 Mar 201700:00	–	checkpoint_advisories
CVE	CVE-2017-0089	17 Mar 201700:00	–	cve
GoogleProjectZero	Notes on Windows Uniscribe Fuzzing	10 Apr 201700:00	–	googleprojectzero
Microsoft KB	March 2017 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1	14 Mar 201707:00	–	mskb
Microsoft KB	March 2017 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1	14 Mar 201707:00	–	mskb
Microsoft KB	MS17-011 and MS17-013: Description of the security update for Microsoft Graphics Component: March 14, 2017	14 Mar 201707:00	–	mskb
Microsoft KB	MS17-011: Security update for Microsoft Uniscribe: March 14, 2017	14 Mar 201700:00	–	mskb
Kaspersky	KLA10978 Multiple vulnerabilities in Windows Uniscribe	14 Mar 201700:00	–	kaspersky

[
  {
    "product": "Windows Uniscribe",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0089
securitytracker	www.securitytracker.com/id/1037992
securityfocus	www.securityfocus.com/bid/96606
exploit-db	www.exploit-db.com/exploits/41652/

15 Aug 2017 09:57Current

7.5High risk

Vulners AI Score7.5

EPSS0.75159