PT-2017-1642 · Microsoft · Msxml+9

Published 2017-03-14 · Updated 2025-04-04 · CVE-2017-0022

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft XML Core Services (MSXML) versions in Windows 10 Gold, 1511, and 1607 Microsoft XML Core Services (MSXML) in Windows 7 SP1 Microsoft XML Core Services (MSXML) in Windows 8.1 Microsoft XML Core Services (MSXML) in Windows RT 8.1 Microsoft XML Core Services (MSXML) in Windows Server 2008 SP2 and R2 SP1 Microsoft XML Core Services (MSXML) in Windows Server 2012 Gold and R2 Microsoft XML Core Services (MSXML) in Windows Server 2016 Microsoft XML Core Services (MSXML) in Windows Vista SP2

Description The issue is related to the improper handling of objects in memory by Microsoft XML Core Services (MSXML) in Windows, allowing attackers to test for files on disk via a crafted web site. This can enable an attacker to obtain sensitive information. The exploitation of this issue can be done remotely.

Recommendations For Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607, update to a version that properly handles objects in memory. For Microsoft XML Core Services (MSXML) in Windows 7 SP1, update to a version that properly handles objects in memory. For Microsoft XML Core Services (MSXML) in Windows 8.1, update to a version that properly handles objects in memory. For Microsoft XML Core Services (MSXML) in Windows RT 8.1, update to a version that properly handles objects in memory. For Microsoft XML Core Services (MSXML) in Windows Server 2008 SP2 and R2 SP1, update to a version that properly handles objects in memory. For Microsoft XML Core Services (MSXML) in Windows Server 2012 Gold and R2, update to a version that properly handles objects in memory. For Microsoft XML Core Services (MSXML) in Windows Server 2016, update to a version that properly handles objects in memory. For Microsoft XML Core Services (MSXML) in Windows Vista SP2, update to a version that properly handles objects in memory.

Exploit

Fix

Buffer Overflow

Information Disclosure

Weakness Enumeration

CWE-119

CWE-200

Related Identifiers

BDU:2017-00795

CVE-2017-0022

Affected Products

Msxml

Windows

Windows 10

Windows 7

Windows 8.1

Windows Rt 8.1

Windows Server 2008

Windows Server 2012

Windows Server 2016

Windows Vista

References · 14

• 🔥 https://0patch.blogspot.com/2017/09/exploit-kit-rendezvous-and-cve-2017-0022.html · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0022 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-0022 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0022 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-00795 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-0022 · Security Note
• https://osv.dev/vulnerability/CVE-2017-0022 · Vendor Advisory
• https://t.me/cvenotify/117892 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0022 · Note
• http://securityfocus.com/bid/96069 · Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-022 · Note
• http://securitytracker.com/id/1038014 · Note
• https://t.me/cvenotify/110595 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog · Note