high8.1
CVE-2017-0166
An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated.
Impact
An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated. In a remote attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to send malicious traffic to a Domain Controller, aka "LDAP Elevation of Privilege Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 10 | All versions Versions 1511, 1607, 1703 |
| Microsoft | Windows 7 | All versions |
| Microsoft | Windows 8.1 | All versions |
| Microsoft | Windows Rt 8.1 | All versions |
| Microsoft | Windows Server 2008 | All versions Version r2 |
| Microsoft | Windows Server 2012 | All versions Version r2 |
| Microsoft | Windows Server 2016 | All versions |
| Microsoft | Windows Vista | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/97446
- http://www.securitytracker.com/id/1038245
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0166
- http://www.securityfocus.com/bid/97446
- http://www.securitytracker.com/id/1038245
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0166