medium5.5Public exploit code
CVE-2017-0167
An information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the Windows ker…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows Kernel - 'win32kfull!SfnINLPUAHDRAWMENUITEM' Stack Memory Disclosure2017-04-13 · dos · windows · Verified
Impact
An information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user's system, a.k.a. "Windows Kernel Information Disclosure Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 10 | All versions Versions 1511, 1607, 1703 |
| Microsoft | Windows 8.1 | All versions |
| Microsoft | Windows Rt 8.1 | All versions |
| Microsoft | Windows Server 2012 | Version r2 |
| Microsoft | Windows Server 2016 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/97473
- http://www.securitytracker.com/id/1038239
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0167
- https://www.exploit-db.com/exploits/41880/
- http://www.securityfocus.com/bid/97473
- http://www.securitytracker.com/id/1038239
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0167
- https://www.exploit-db.com/exploits/41880/