The Windows kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows authenticated attackers to obtain sensitive information via a specially crafted document, aka "Windows Kernel Information Disclosure Vulnerability," a different vulnerability than CVE-2017-0175, CVE-2017-0220, and CVE-2017-0258.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/98113 | Third Party Advisory VDB Entry |
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0259 | Patch Vendor Advisory |
| https://www.exploit-db.com/exploits/42007/ | |
| http://www.securityfocus.com/bid/98113 | Third Party Advisory VDB Entry |
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0259 | Patch Vendor Advisory |
| https://www.exploit-db.com/exploits/42007/ |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/98113 - Third Party Advisory, VDB Entry | |
| References | () https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0259 - Patch, Vendor Advisory | |
| References | () https://www.exploit-db.com/exploits/42007/ - |
Information
Published : 2017-05-12 14:29
Updated : 2024-11-21 03:02
NVD link : CVE-2017-0259
Mitre link : CVE-2017-0259
CVE.ORG link : CVE-2017-0259
JSON object : View
Products Affected
microsoft
- windows_rt_8.1
- windows_server_2012
- windows_8.1
- windows_server_2016
- windows_10
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor