PT-2017-2684 · Microsoft · Windows Pdf Library+1

Published 2017-08-08 · Updated 2017-08-15 · CVE-2017-0293

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows PDF Library versions prior to the fixed version

Description The issue is caused by an out-of-bounds operation in memory, allowing a remote attacker to execute arbitrary code when objects in memory are improperly handled. This can be exploited when the system incorrectly processes objects, potentially leading to remote code execution.

Recommendations For Microsoft Windows PDF Library, update to a version that includes the fix for this issue to prevent remote code execution. As a temporary workaround, consider restricting access to the Microsoft Windows PDF Library until a patch is available.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2017-01912

CVE-2017-0293

ZDI-17-636

Affected Products

Windows Pdf Library

Windows

References · 9

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-0293 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01912 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-0293 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0293 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-17-636 · Security Note
• https://osv.dev/vulnerability/CVE-2017-0293 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0293 · Security Note
• http://securityfocus.com/bid/100039 · Note
• http://securitytracker.com/id/1039092 · Note