CVE-2017-0045

2017-03-1700:00:00

microsoft

www.cve.org

5.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%

JSON

Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse crafted .msdvd files, which allows attackers to obtain information to compromise a target system, aka “Windows DVD Maker Cross-Site Request Forgery Vulnerability.”

CNA Affected

[
  {
    "product": "Windows DVD Maker",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2"
      }
    ]
  }
]