Lucene search

MicrosoftCVE-2017-0285

HistoryJun 15, 2017 - 1:29 a.m.

CVE-2017-0285

2017-06-1501:29:02

CWE-200

microsoft

web.nvd.nist.gov

cve-2017-0285

uniscribe

windows server 2008

windows 7

windows 8.1

windows 10

microsoft office

information disclosure

vulnerability

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

AI Score

4.9

Confidence

High

EPSS

0.009

Percentile

83.1%

JSON

Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, and Microsoft Office Word Viewer allows improper disclosure of memory contents, aka “Windows Uniscribe Information Disclosure Vulnerability”. This CVE ID is unique from CVE-2017-0282, CVE-2017-0284, and CVE-2017-8534.

Affected configurations

Nvd

Vulners

Node

microsoftofficeMatch2007sp3

microsoftofficeMatch2010sp2

microsoftoffice_word_viewerMatch-

microsoftwindows_10Match-

microsoftwindows_10Match1511

microsoftwindows_10Match1607

microsoftwindows_10Match1703

microsoftwindows_7Match-sp1

microsoftwindows_8.1Match-

microsoftwindows_rt_8.1

microsoftwindows_server_2008Match-sp2itanium

microsoftwindows_server_2008Match-sp2x64

microsoftwindows_server_2008Matchr2sp1

microsoftwindows_server_2012Match-

microsoftwindows_server_2012Matchr2

microsoftwindows_server_2016Match-

VendorProductVersionCPE
microsoftoffice2007cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*
microsoftoffice2010cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
microsoftoffice_word_viewer-cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*
microsoftwindows_10-cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
microsoftwindows_101511cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*
microsoftwindows_101607cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
microsoftwindows_101703cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*
microsoftwindows_7-cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
microsoftwindows_8.1-cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
microsoftwindows_rt_8.1*cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	office	2007	cpe:2.3:a:microsoft:office:2007:sp3::::::
microsoft	office	2010	cpe:2.3:a:microsoft:office:2010:sp2::::::
microsoft	office_word_viewer	-	cpe:2.3:a:microsoft:office_word_viewer:-:::::::*
microsoft	windows_10	-	cpe:2.3:o:microsoft:windows_10:-:::::::*
microsoft	windows_10	1511	cpe:2.3:o:microsoft:windows_10:1511:::::::*
microsoft	windows_10	1607	cpe:2.3:o:microsoft:windows_10:1607:::::::*
microsoft	windows_10	1703	cpe:2.3:o:microsoft:windows_10:1703:::::::*
microsoft	windows_7	-	cpe:2.3:o:microsoft:windows_7:-:sp1::::::
microsoft	windows_8.1	-	cpe:2.3:o:microsoft:windows_8.1:-:::::::*
microsoft	windows_rt_8.1	*	cpe:2.3:o:microsoft:windows_rt_8.1::::::::

Rows per page:

1-10 of 161

CNA Affected

[
  {
    "product": "Uniscribe",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, and Microsoft Office Word Viewer."
      }
    ]
  }
]