high7.8Public exploit code
CVE-2017-8487
Windows OLE in Windows XP and Windows Server 2003 allows an attacker to execute code when a victim opens a specially crafted file or program aka "Windows olecn…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows - 'IOCTL 0x390400_ operation code 0x00020000' Kernel KsecDD Pool Memory Disclosure2017-06-21 · dos · windows · Verified
Impact
Windows OLE in Windows XP and Windows Server 2003 allows an attacker to execute code when a victim opens a specially crafted file or program aka "Windows olecnv32.dll Remote Code Execution Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows Server 2003 | All versions |
| Microsoft | Windows Xp | All versions |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/99013
- http://www.securitytracker.com/id/1038702
- https://support.microsoft.com/en-us/help/4025218/security-update-for-windows-xp-and-windows-server-2003
- https://www.exploit-db.com/exploits/42211/
- http://www.securityfocus.com/bid/99013
- http://www.securitytracker.com/id/1038702
- https://support.microsoft.com/en-us/help/4025218/security-update-for-windows-xp-and-windows-server-2003
- https://www.exploit-db.com/exploits/42211/