CVE-2017-0001

Warnung

EPSS 14.48%
Veröffentlicht 17.03.2017 00:59:00
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle secure@microsoft.com
Teams Watchlist Login
Unerledigt Login

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "Windows GDI Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0005, CVE-2017-0025, and CVE-2017-0047.

Betroffene Produkte Warnungen 1 Metriken 4 CWE 0 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Windows 10 1507 Version- HwPlatformx64

Microsoft ≫ Windows 10 1507 Version- HwPlatformx86

Microsoft ≫ Windows 10 1511 Version- HwPlatformx64

Microsoft ≫ Windows 10 1511 Version- HwPlatformx86

Microsoft ≫ Windows 10 1607 Version- HwPlatformx64

Microsoft ≫ Windows 10 1607 Version- HwPlatformx86

Microsoft ≫ Windows 7 Version- Updatesp1

Microsoft ≫ Windows 8.1 Version-

Microsoft ≫ Windows Rt 8.1 Version-

Microsoft ≫ Windows Server 2008 Version- Updatesp2

Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1

Microsoft ≫ Windows Server 2012 Version-

Microsoft ≫ Windows Server 2012 Versionr2

Microsoft ≫ Windows Server 2016 Version-

Microsoft ≫ Windows Vista Version- Updatesp2

03.03.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability

Schwachstelle

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	14.48%	0.942

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

http://www.securityfocus.com/bid/96057

Third Party Advisory

Broken Link

VDB Entry

http://www.securitytracker.com/id/1038002

Third Party Advisory

Broken Link

VDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0001

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-0001

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-0001

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-0001

EUVD