CVE-2017-8685

2017-09-1301:00:00

microsoft

www.cve.org

AI Score

5.5

Confidence

High

EPSS

0.003

Percentile

65.5%

JSON

Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows information disclosure by the way it discloses kernel memory addresses, aka “Windows GDI+ Information Disclosure Vulnerability”. This CVE ID is unique from CVE-2017-8684 and CVE-2017-8688.

CNA Affected

[
  {
    "product": "Windows GDI+",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Microsoft Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1"
      }
    ]
  }
]