Win32k Information Disclosure Vulnerability

🗓️ 11 Apr 2017 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 18 Views

Win32k Information Disclosure Vulnerability. Improper kernel information provision. Attacker can exploit to compromise user system. Security update corrects win32k memory object handling

Reporter	Title	Published	Views	Family All 39
0day.today	Microsoft Windows Kernel win32k.sys - Multiple Bugs in the NtGdiGetDIBitsInternal System Call Exploi	13 Apr 201700:00	–	zdt
Circl	CVE-2017-0058	13 Apr 201700:00	–	circl
CNVD	Microsoft Windows Kernel 'Win32k.sys' Local Information Disclosure Vulnerability (CNVD-2017-05765)	14 Apr 201700:00	–	cnvd
CVE	CVE-2017-0058	12 Apr 201714:00	–	cve
Cvelist	CVE-2017-0058	12 Apr 201714:00	–	cvelist
Microsoft KB	Security update for the Win32k information disclosure and escalation of privilege vulnerabilities in Windows Vista and Windows Server 2008: April 11, 2017	11 Apr 201707:00	–	mskb
Microsoft KB	April 11, 2017—KB4015217 (OS Build 14393.1066 and 14393.1083)	11 Apr 201707:00	–	mskb
Microsoft KB	April 11, 2017—KB4015219 (OS Build 10586.873)	11 Apr 201707:00	–	mskb
Microsoft KB	April 11, 2017—KB4015221 (OS Build 10240.17354)	11 Apr 201707:00	–	mskb
Microsoft KB	April 11, 2017—KB4015546 (Security-only update)	11 Apr 201707:00	–	mskb

Vulners

Node

microsoft windows_server_2016

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_10_version_1703_for_x64-based_systems

OR

microsoft windows_10_version_1703_for_32-bit_systems

OR

microsoft windows_server_2016_(server_core_installation)

OR

microsoft windows_vista_x64_edition_service_pack_2

OR

microsoft windows_vista_service_pack_2

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012

OR

microsoft windows_server_2012

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_version_1511_for_x64-based_systems

OR

microsoft windows_10_version_1511_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_for_32-bit_systems

11 Apr 2017 07:00Current

1.4Low risk

Vulners AI Score1.4

CVSS 21.9

CVSS 34.7

EPSS0.03655

win32k information disclosure vulnerability kernel compromise security update memory object handling microsoft