Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2017-0122
HistoryMar 17, 2017 - 12:59 a.m.

CVE-2017-0122

2017-03-1700:59:03
CWE-200
[email protected]
web.nvd.nist.gov
51
uniscribe
microsoft
windows
vulnerability
information disclosure
cve-2017-0122
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

4.5 Medium

AI Score

Confidence

High

0.083 Low

EPSS

Percentile

94.4%

JSON

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka “Uniscribe Information Disclosure Vulnerability.” CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128.

Affected configurations

Vulners
NVD
Node
microsoft_corporationwindows_uniscribe

CNA Affected

[
  {
    "product": "Windows Uniscribe",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1"
      }
    ]
  }
]

Related

cve 20
prion 21
cvelist 21
nvd 21
zdt 2
kaspersky 3
openvas 1
nessus 1
mskb 11
mscve 21
symantec 21
checkpoint_advisories 2
googleprojectzero 1
cve
cve
CVE-2017-0113
2017-03-17 00:59:03
CVE-2017-0116
2017-03-17 00:59:03
CVE-2017-0118
2017-03-17 00:59:03
prion
prion
Information disclosure
2017-03-17 00:59:00
Information disclosure
2017-03-17 00:59:00
Information disclosure
2017-03-17 00:59:00
cvelist
cvelist
CVE-2017-0122
2017-03-17 00:00:00
CVE-2017-0128
2017-03-17 00:00:00
CVE-2017-0123
2017-03-17 00:00:00
nvd
nvd
CVE-2017-0091
2017-03-17 00:59:02
CVE-2017-0114
2017-03-17 00:59:03
CVE-2017-0125
2017-03-17 00:59:03
zdt
zdt
Microsoft Windows - Uniscribe Font Processing Multiple Heap-Based Out-of-Bounds and Wild Reads (MS17
2017-03-20 00:00:00
Microsoft Windows - Uniscribe Font Processing Out-of-Bounds Read in usp10!otlChainRuleSetTable::rule
2017-03-20 00:00:00
kaspersky
kaspersky
KLA10978 Multiple vulnerabilities in Windows Uniscribe
2017-03-14 00:00:00
KLA11902 Multiple vulnerabilities in Microsoft Products (ESU)
2017-03-14 00:00:00
KLA10979 Multiple vulnerabilities in Microsoft Windows
2017-03-14 00:00:00
openvas
openvas
Microsoft Uniscribe Multiple Vulnerabilities (4013076)
2017-03-15 00:00:00
nessus
nessus
MS17-011: Security Update for Microsoft Uniscribe (4013076)
2017-03-14 00:00:00
mskb
mskb
MS17-011 and MS17-013: Description of the security update for Microsoft Graphics Component: March 14, 2017
2017-03-14 07:00:00
MS17-011: Security update for Microsoft Uniscribe: March 14, 2017
2017-03-14 00:00:00
March 2017 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1
2017-03-14 07:00:00
mscve
mscve
Windows Uniscribe Information Disclosure Vulnerability
2017-03-14 07:00:00
Windows Uniscribe Information Disclosure Vulnerability
2017-03-14 07:00:00
Windows Uniscribe Information Disclosure Vulnerability
2017-03-14 07:00:00
symantec
symantec
Microsoft Windows Uniscribe CVE-2017-0122 Information Disclosure Vulnerability
2017-03-14 00:00:00
Microsoft Windows Uniscribe CVE-2017-0123 Information Disclosure Vulnerability
2017-03-14 00:00:00
Microsoft Windows Uniscribe CVE-2017-0121 Information Disclosure Vulnerability
2017-03-14 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows Uniscribe Information Disclosure (MS17-011: CVE-2017-0121)
2017-03-14 00:00:00
Microsoft Windows Uniscribe Information Disclosure (MS17-011: CVE-2017-0085)
2017-04-16 00:00:00
googleprojectzero
googleprojectzero
Notes on Windows Uniscribe Fuzzing
2017-04-10 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

4.5 Medium

AI Score

Confidence

High

0.083 Low

EPSS

Percentile

94.4%

JSON
Related for CVE-2017-0122
cve20prion21cvelist21nvd21zdt2kaspersky3openvas1nessus1mskb11mscve21symantec21checkpoint_advisories2googleprojectzero1