CVE-2017-11850

EUVD-2017-3450
Microsoft Graphics Component in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to log on to an affected system and run a specially crafted application due to improper handling of objects in memory, aka "Microsoft Graphics Component Information Disclosure Vulnerability".
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.5 LOW
LOCAL
HIGH
LOW
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 87%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_10
-
microsoftwindows_8.1
-
microsoftwindows_rt_8.1
-
microsoftwindows_server_2012
*
microsoftwindows_server_2016
-
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
(x64, x86)
KB4048956
1511 (x64, x86)
KB4048952
1607 (x64, x86)
KB4048953
1703 (x64, x86)
KB4048954
1709 (x64, x86)
KB4048955
Windows 8.1
(x64, x86)
KB4048961
Windows RT 8.1
All
KB4048958
Windows Server
1709 Server Core
KB4048955
Windows Server 2012
Server Core
KB4048962
Standard
KB4048962
Windows Server 2012 R2
Server Core
KB4048961
Standard
KB4048961
Windows Server 2016
Server Core
KB4048953
Standard
KB4048953
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/101738
http://www.securitytracker.com/id/1039782
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11850
http://www.securityfocus.com/bid/101738
http://www.securitytracker.com/id/1039782
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11850