CVE-2017-8682

 

Published at: - 13-09-2017 03:29

Last modified: - 22-11-2022 05:52

Total changes: - 4

Description

Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, Windows Server 2016, Microsoft Office Word Viewer, Microsoft Office 2007 Service Pack 3 , and Microsoft Office 2010 Service Pack 2 allows an attacker to execute remote code by the way it handles embedded fonts, aka "Win32k Graphics Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8683.

Common Vulnerability Scoring System (CVSS)

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8682
• 100772-Third Party Advisory, VDB Entry
• 1039352-Third Party Advisory, VDB Entry
• 42744-Exploit, Third Party Advisory, VDB Entry

 

Keywords

NVD

 

CVE-2017-8682

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures