CVE-2017-11768

EUVD-2017-3377
Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows remote attackers to test for the presence of files on disk via a specially crafted application. due to the way Windows Media Player discloses file information, aka "Windows Media Player Information Disclosure Vulnerability."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.5 LOW
LOCAL
HIGH
LOW
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_media_player
-
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
(x64, x86)
KB4048956
1511 (x64, x86)
KB4048952
1607 (x64, x86)
KB4048953
1703 (x64, x86)
KB4048954
1709 (x64, x86)
KB4048955
Windows 7
Service Pack 1 (x64, x86)
KB4048960
Windows 8.1
(x64, x86)
KB4048961
Windows RT 8.1
All
KB4048958
Windows Server
1709 Server Core
KB4048955
Windows Server 2008
Service Pack 2 (x64, x86)
KB4047170
Service Pack 2 Server Core (x64, x86)
KB4047170
Windows Server 2008 R2
Service Pack 1 (x64)
KB4048960
Service Pack 1 Server Core (x64)
KB4048960
Windows Server 2012
Server Core
KB4048962
Standard
KB4048962
Windows Server 2012 R2
Server Core
KB4048961
Standard
KB4048961
Windows Server 2016
Server Core
KB4048953
Standard
KB4048953
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/101705
http://www.securitytracker.com/id/1039794
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11768
http://www.securityfocus.com/bid/101705
http://www.securitytracker.com/id/1039794
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11768