Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2017-0242
HistoryMay 12, 2017 - 2:29 p.m.

CVE-2017-0242

2017-05-1214:29:03
CWE-200
[email protected]
web.nvd.nist.gov
5

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0.003

Percentile

68.4%

JSON

An information disclosure vulnerability exists in the way some ActiveX objects are instantiated, aka “Microsoft ActiveX Information Disclosure Vulnerability.”

Affected configurations

Nvd
Node
microsoftwindows_7Match-
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_server_2008Match-sp2itanium
OR
microsoftwindows_server_2008Matchr2sp1

Related

mscve 1
openvas 2
mskb 3
prion 1
cvelist 1
symantec 1
cve 1
nessus 1
kaspersky 1
trendmicroblog 1
mscve
mscve
Microsoft ActiveX Information Disclosure Vulnerability
2017-05-09 07:00:00
openvas
openvas
Microsoft ActiveX 'Msadcf.dll' Information Disclosure Vulnerability (KB4018927)
2017-05-10 00:00:00
Microsoft Windows Monthly Rollup (KB4019264)
2017-05-10 00:00:00
mskb
mskb
Security Update for the Microsoft ActiveX Information Disclosure Vulnerability in Windows Server 2008: May 9, 2017
2017-05-09 07:00:00
May 9, 2017—KB4019263 (Security-only update)
2017-05-09 07:00:00
May 9, 2017—KB4019264 (Monthly Rollup)
2017-05-09 07:00:00
prion
prion
Information disclosure
2017-05-12 14:29:00
cvelist
cvelist
CVE-2017-0242
2017-05-12 14:00:00
symantec
symantec
Microsoft Windows CVE-2017-0242 ActiveX Control Local Information Disclosure Vulnerability
2017-05-09 00:00:00
cve
cve
CVE-2017-0242
2017-05-12 14:29:03
nessus
nessus
Windows 2008 May 2017 Multiple Security Updates
2017-05-09 00:00:00
kaspersky
kaspersky
KLA11077 Multiple vulnerabilities in Microsoft Products (ESU)
2017-05-09 00:00:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of May 8, 2017
2017-05-12 16:47:57

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0.003

Percentile

68.4%

JSON
Related for NVD:CVE-2017-0242
mscve1openvas2mskb3prion1cvelist1symantec1cve1nessus1kaspersky1trendmicroblog1