Lucene search

CVE-2017-8676

🗓️ 13 Sep 2017 01:00:00Reported by microsoftType

Windows GDI+ Information Disclosure Vulnerability in Multiple Microsoft Product

Reporter	Title	Published	Views	Family All 61
CVE	CVE-2017-8676	13 Sep 201701:29	–	cve
Prion	Information disclosure	13 Sep 201701:29	–	prion
Microsoft CVE	Windows GDI+ Information Disclosure Vulnerability	12 Sep 201707:00	–	mscve
NVD	CVE-2017-8676	13 Sep 201701:29	–	nvd
Zero Day Initiative	Microsoft Windows Bitmap Parsing Out-Of-Bounds Read Information Disclosure Vulnerability	12 Sep 201700:00	–	zdi
Symantec	Microsoft Windows Graphics Device Interface CVE-2017-8676 Local Information Disclosure Vulnerability	12 Sep 201700:00	–	symantec
Microsoft KB	Description of the security update for Word Viewer: September 12, 2017	12 Sep 201707:00	–	mskb
Microsoft KB	Description of the security update for Skype for Business 2016: September 12, 2017	12 Sep 201707:00	–	mskb
Microsoft KB	Description of the security update for Office Live Meeting Console: September 12, 2017	12 Sep 201707:00	–	mskb
Microsoft KB	Description of the security update for Lync 2010 Attendee (admin level install): September 12, 2017	12 Sep 201707:00	–	mskb

[
  {
    "product": "Windows Graphics Device Interface (GDI)",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Microsoft Windows Server 2008 SP2 and R2 SP1"
      },
      {
        "status": "affected",
        "version": "Windows 7 SP1"
      },
      {
        "status": "affected",
        "version": "Windows 8.1"
      },
      {
        "status": "affected",
        "version": "Windows Server 2012 Gold and R2"
      },
      {
        "status": "affected",
        "version": "Windows RT 8.1"
      },
      {
        "status": "affected",
        "version": "Windows 10 Gold, 1511, 1607, 1703, and Server 2016"
      },
      {
        "status": "affected",
        "version": "Office 2007 SP3"
      },
      {
        "status": "affected",
        "version": "Office 2010 SP2"
      },
      {
        "status": "affected",
        "version": "Word Viewer"
      },
      {
        "status": "affected",
        "version": "Office for Mac 2011 and 2016"
      },
      {
        "status": "affected",
        "version": "Skype for Business 2016"
      },
      {
        "status": "affected",
        "version": "Lync 2013 SP1"
      },
      {
        "status": "affected",
        "version": "Lync 2010"
      },
      {
        "status": "affected",
        "version": "Lync 2010 Attendee"
      },
      {
        "status": "affected",
        "version": "Live Meeting 2007 Add-in and Console"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8676
securitytracker	www.securitytracker.com/id/1039333
securityfocus	www.securityfocus.com/bid/100755

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Sep 2017 01:00Current

5Medium risk

Vulners AI Score5

EPSS0.092