Win32k Graphics Remote Code Execution Vulnerability

🗓️ 12 Sep 2017 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 32 Views

Win32k Graphics Remote Code Execution Vulnerability - Windows font library handling issu

Reporter	Title	Published	Views	Family All 52
0day.today	Microsoft Windows Kernel - win32k.sys TTF Font Processing - Out-of-Bounds Reads/Writes with Malforme	18 Sep 201700:00	–	zdt
BDU FSTEC	The vulnerability of the Windows operating system’s font library, allowing a hacker to execute arbitrary code	26 Oct 201700:00	–	bdu_fstec
Circl	CVE-2017-8682	18 Sep 201700:00	–	circl
CNVD	Microsoft Windows and Office graphics remote code execution vulnerability	13 Sep 201700:00	–	cnvd
Check Point Advisories	Microsoft Win32k Graphics Remote Code Execution (CVE-2017-8682)	12 Sep 201700:00	–	checkpoint_advisories
CVE	CVE-2017-8682	13 Sep 201701:00	–	cve
Cvelist	CVE-2017-8682	13 Sep 201701:00	–	cvelist
Microsoft KB	Description of the security update for Office 2010: September 12, 2017	12 Sep 201707:00	–	mskb
Microsoft KB	Description of the security update for 2007 Microsoft Office Suite: September 12, 2017	12 Sep 201707:00	–	mskb
Microsoft KB	Description of the security update for Word Viewer: September 12, 2017	12 Sep 201707:00	–	mskb

Vulners

Node

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012

OR

microsoft windows_server_2012

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_version_1511_for_x64-based_systems

OR

microsoft windows_10_version_1511_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_for_32-bit_systems

OR

microsoft windows_10_version_1703_for_x64-based_systems

OR

microsoft windows_10_version_1703_for_32-bit_systems

OR

microsoft office_word_viewer

OR

microsoft office_2010_service_pack_2_(64-bit_editions)

OR

microsoft office_2010_service_pack_2_(32-bit_editions)

OR

microsoft office_2007_service_pack_3

OR

microsoft windows_server_2016_(server_core_installation)

OR

microsoft windows_server_2016

14 Sep 2017 07:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 38.4 - 8.8

CVSS 29.3

EPSS0.66013

remote code execution windows font library embedded fonts web-based attack file sharing attack security update microsoft