PT-2017-18478 · Microsoft · Graphics+3

Published 2017-10-10 · Updated 2017-10-27 · CVE-2017-8693

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions 10 Gold, 1511, 1607, and 1703 Windows Server 2016

Description The issue allows attackers to obtain sensitive information and affect the system. It is related to the way the Microsoft Graphics Component handles objects in memory.

Recommendations For Microsoft Windows 10 versions 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-8693

Affected Products

Graphics

Windows 10

Windows

Windows Server 2016

References · 7

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8693 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8693 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-8693 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-8693 · Security Note
• https://osv.dev/vulnerability/CVE-2017-8693 · Vendor Advisory
• http://securityfocus.com/bid/101096 · Note
• http://securitytracker.com/id/1039536 · Note