PT-2017-12241 · Microsoft · Windows Server 2012 R2+5

Published 2017-10-10 · Updated 2019-10-03 · CVE-2017-11783

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1, 10 (Gold, 1511, 1607, 1703), Windows Server versions 2012 R2, 2016, and Windows RT 8.1

Description The issue allows an elevation of privilege due to the way the system handles calls to Advanced Local Procedure Call (ALPC). This enables attackers to affect the system.

Recommendations For Microsoft Windows versions 8.1, 10, Windows Server 2012 R2, 2016, and Windows RT 8.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2017-11783

Affected Products

Windows

Windows 10

Windows 8.1

Windows Rt 8.1

Windows Server 2012 R2

Windows Server 2016

References · 8

• 🔥 https://github.com/Sheisback/CVE-2017-11783 · Exploit
• https://osv.dev/vulnerability/CVE-2017-11783 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-11783 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-11783 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11783 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11783 · Vendor Advisory
• http://securityfocus.com/bid/101144 · Note
• http://securitytracker.com/id/1039526 · Note