CVE-2017-0108

🗓️ 17 Mar 2017 00:00:00Reported by microsoftType

Microsoft Office 2007, 2010, Word Viewer, Skype for Business, Lync, Live Meeting, Silverlight, Remote Code Execution Vulnerabilit

Reporter	Title	Published	Views	Family All 34
0day.today	Microsoft Windows - USP10!otlList::insertAt Uniscribe Font Processing Heap-Based Buffer Overflow (MS	20 Mar 201700:00	–	zdt
BDU FSTEC	Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code	31 Mar 201700:00	–	bdu_fstec
Circl	CVE-2017-0108	20 Mar 201700:00	–	circl
CNVD	Microsoft windows graphics component remote code execution vulnerability (CNVD-2017-03687)	15 Mar 201700:00	–	cnvd
Check Point Advisories	Microsoft Windows Graphics Component Remote Code Execution (MS17-013: CVE-2017-0108)	14 Mar 201700:00	–	checkpoint_advisories
CVE	CVE-2017-0108	17 Mar 201700:00	–	cve
GoogleProjectZero	Notes on Windows Uniscribe Fuzzing	10 Apr 201700:00	–	googleprojectzero
Microsoft KB	MS17-013: Description of the security update for 2007 Microsoft Office Suite: March 14, 2017	14 Mar 201707:00	–	mskb
Microsoft KB	MS17-013: Description of the security update for Office 2010: March 14, 2017	14 Mar 201707:00	–	mskb
Microsoft KB	Security update 2017-03-14	14 Mar 201707:00	–	mskb

[
  {
    "product": "Windows Graphics Component",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0108
securityfocus	www.securityfocus.com/bid/96722
exploit-db	www.exploit-db.com/exploits/41647/
securitytracker	www.securitytracker.com/id/1038002

15 Aug 2017 09:57Current

6.5Medium risk

Vulners AI Score6.5

EPSS0.36707