Security update for the Windows Uniscribe vulnerabilities in Windows Server 2008: September 12, 2017

🗓️ 12 Sep 2017 07:00:00Reported by MicrosoftType

Security update for Windows Uniscribe vulnerabilities in Windows Server 2008, September 12, 2017. Remote code execution and information disclosure due to memory handling

Reporter	Title	Published	Views	Family All 203
0day.today	Microsoft Windows Kernel - win32k!NtQueryCompositionSurfaceBinding Stack Memory Disclosure Exploit	18 Sep 201700:00	–	zdt
0day.today	Microsoft Windows Kernel - win32k!NtGdiDoBanding Stack Memory Disclosure Exploit	18 Sep 201700:00	–	zdt
0day.today	Microsoft Windows Kernel - win32k.sys TTF Font Processing - Out-of-Bounds Reads/Writes with Malforme	18 Sep 201700:00	–	zdt
0day.today	Microsoft Windows Kernel - win32k.sys TTF Font Processing Out-of-Bounds Read with Malformed Exploit	18 Sep 201700:00	–	zdt
0day.today	Microsoft Windows Kernel - win32k!NtGdiGetFontResourceInfoInternalW Stack Memory Disclosure Exploit	18 Sep 201700:00	–	zdt
0day.today	Microsoft Windows Kernel - win32k!NtGdiEngCreatePalette Stack Memory Disclosure Exploit	18 Sep 201700:00	–	zdt
0day.today	Microsoft Windows Kernel - win32k!NtGdiGetGlyphOutline Pool Memory Disclosure Exploit	18 Sep 201700:00	–	zdt
0day.today	Microsoft Windows Kernel - win32k!NtGdiGetPhysicalMonitorDescription Stack Memory Disclosure Exploit	18 Sep 201700:00	–	zdt
BDU FSTEC	The vulnerability affects the Uniscribe services on the Windows operating system, the Microsoft Office software suite, the web conference software Live Meeting, the instant messaging application Skype for Business, and the instant messaging software Microsoft Lync. This vulnerability arises due to an out-of-buffer operation in memory, allowing an attacker to execute arbitrary code.	11 Oct 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the graphical component of the Windows operating system, Win32k, allows a hacker to execute code in kernel mode and gain increased privileges.	25 Oct 201700:00	–	bdu_fstec

12 Sep 2017 07:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 29.3

CVSS 38.8

EPSS0.49765