CVE-2017-0045

Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse crafted .msdvd files, which allows attackers to obtain information to compromise a target system, aka "Windows DVD Maker Cross-Site Request Forgery Vulnerability."...

CVE-2017-0045: Cross-Site Request Forgery (CSRF)

Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse crafted .msdvd files, which allows attackers to obtain information to compromise a target system, aka "Windows DVD Maker Cross-Site Request Forgery Vulnerability."...

PT-2017-1628

Name of the Vulnerable Software and Affected Versions Windows DVD Maker versions in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 Description The issue is related to the improper parsing of crafted .msdvd files by Windows DVD Maker, allowing attackers to obtain...

KLA10987 Information disclosure in Windows DVD Maker

An improper parsing of .msdvd files was found in Windows DVD maker. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a specially designed .msdvd file. Original advisories MS17-020 CVE-2017-0045 Exploitation Public...