CVE-2017-8527

CWE-119 — Buffer Overflow4 documents4 sources
Severity
8.8HIGH
EPSS
28.8%
top 3.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Microsoft Corporation GraphicsMicrosoft LyncMicrosoft Office+5 more
Timeline
PublishedJun 15
Latest updateMay 14

Description

Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it handles objects in memory, aka "Windows Graphics Remote Code Execution Vulnerability".

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages7 packages

▶NVDmicrosoft/windows_101511, 1607, 1703+2
▶CVEListV5microsoft_corporation/graphicsWindows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
▶NVDmicrosoft/lync2013
▶NVDmicrosoft/skype2016

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-5549-vxvm-42h8: Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8↗2022-05-14
▶
CVEList
CVE-2017-8527: Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8↗2017-06-15
▶

📋Vendor Advisories

1
Microsoft
Win32k Graphics Remote Code Execution Vulnerability↗2017-06-13
▶
CVE-2017-8527 (HIGH CVSS 8.8) | Graphics in Windows Server 2008 SP2 | cvebase.io