PT-2017-2684 · Microsoft · Windows Pdf Library+1

Publicado 2017-08-08 · Atualizado 2017-08-15 · CVE-2017-0293

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows PDF Library versions prior to the fixed version

Description The issue is caused by an out-of-bounds operation in memory, allowing a remote attacker to execute arbitrary code when objects in memory are improperly handled. This can be exploited when the system incorrectly processes objects, potentially leading to remote code execution.

Recommendations For Microsoft Windows PDF Library, update to a version that includes the fix for this issue to prevent remote code execution. As a temporary workaround, consider restricting access to the Microsoft Windows PDF Library until a patch is available.

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2017-01912

CVE-2017-0293

ZDI-17-636

Produtos afetados

Windows Pdf Library

Windows

Referências · 9

• http://securityfocus.com/bid/100039 · Nota
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-0293 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2017-01912 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2017-0293 · Nota de Segurança
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0293 · Aviso do Fabricante
• http://securitytracker.com/id/1039092 · Nota
• https://zerodayinitiative.com/advisories/ZDI-17-636 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-0293 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0293 · Nota de Segurança