PT-2017-2411 · Microsoft · Windows Server 2003+2

Published 2017-06-15 · Updated 2019-10-03 · CVE-2017-8487

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows versions prior to the fixed version Windows XP Windows Server 2003

Description The issue is related to insufficient access control in the Windows OLE component, allowing an attacker to execute arbitrary code when a victim opens a specially crafted file or program.

Recommendations For Windows XP, consider applying security patches or updates to fix the issue. For Windows Server 2003, apply the relevant security update to resolve the vulnerability. As a temporary workaround, consider restricting access to potentially vulnerable files or programs until a patch is available.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2017-01614

CVE-2017-8487

Affected Products

Windows Ole

Windows Server 2003

Windows Xp

References · 6

• 🔥 https://exploit-db.com/exploits/42211 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-8487 · Security Note
• https://support.microsoft.com/en-us/help/4025218/security-update-for-windows-xp-and-windows-server-2003 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01614 · Security Note
• http://securityfocus.com/bid/99013 · Note
• http://securitytracker.com/id/1038702 · Note