PT-2017-2952 · Microsoft · Windows Server 2016+7

Published 2017-09-12 · Updated 2017-09-21 · CVE-2017-8728

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows PDF Library versions prior to the fixed version Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold, 1511, 1607, 1703 Windows Server 2016

Description The issue is related to the incorrect handling of objects in memory by the Windows PDF Library, which can allow a remote attacker to execute arbitrary code in the context of the current user. This can be exploited when a user visits a specially prepared website using the Microsoft Edge browser in Microsoft Windows 10, or by opening a specially created PDF document in other affected operating systems. If the current user has administrative rights, an attacker could take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Windows 8.1 and Windows RT 8.1, update to a newer version that contains a fix for this issue. For Windows Server 2012 and R2, update to a newer version that contains a fix for this issue. For Windows 10 Gold, 1511, 1607, 1703, update to a newer version that contains a fix for this issue. For Windows Server 2016, update to a newer version that contains a fix for this issue. As a temporary workaround, consider avoiding the use of the Microsoft Edge browser to open PDF documents from untrusted sources until a patch is available.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2017-02277

CVE-2017-8728

ZDI-17-729

Affected Products

Edge

Windows

Windows 10

Windows 8.1

Windows Pdf Library

Windows Rt 8.1

Windows Server 2012

Windows Server 2016

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2017-8728 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8728 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-02277 · Security Note
• https://osv.dev/vulnerability/CVE-2017-8728 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-17-729 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-8728 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8728 · Security Note
• http://securityfocus.com/bid/100739 · Note
• http://securitytracker.com/id/1039327 · Note