CVE-2017-11842

EUVD-2017-3442
Windows kernel in Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windows kernel improperly initializing a memory address, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11849, CVE-2017-11851, and CVE-2017-11853.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.7 MEDIUM
LOCAL
HIGH
LOW
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_10
-
microsoftwindows_8.1
-
microsoftwindows_rt_8.1
-
microsoftwindows_server_2012
*
microsoftwindows_server_2016
-
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
(x64, x86)
KB4048956
1511 (x64, x86)
KB4048952
1607 (x64, x86)
KB4048953
1703 (x64, x86)
KB4048954
1709 (x64, x86)
KB4048955
Windows 8.1
(x64, x86)
KB4048961
Windows RT 8.1
All
KB4048958
Windows Server
1709 Server Core
KB4048955
Windows Server 2012
Server Core
KB4048962
Standard
KB4048962
Windows Server 2012 R2
Server Core
KB4048961
Standard
KB4048961
Windows Server 2016
Server Core
KB4048953
Standard
KB4048953
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/101719
http://www.securitytracker.com/id/1039782
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11842
http://www.securityfocus.com/bid/101719
http://www.securitytracker.com/id/1039782
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11842