CVE-2017-8695

CWE-200 — Information Exposure7 documents5 sources
Severity
5.3MEDIUM
EPSS
25.7%
top 3.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Microsoft Corporation Windows UniscribeMicrosoft Live MeetingMicrosoft Lync+5 more
Timeline
PublishedSep 13
Latest updateMay 17

Description

Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an attacker to obtain information to further compromise a user's system via a specially crafted document or …

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.6 | Impact: 3.6

Affected Packages7 packages

▶CVEListV5microsoft_corporation/windows_uniscribe15 versions+14
▶NVDmicrosoft/windows_101511, 1607, 1703+2
▶NVDmicrosoft/lync2010, 2013+1

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-jp9v-xrg8-j2hv: Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8↗2022-05-17
▶
CVEList
CVE-2017-8695: Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8↗2017-09-13
▶

📋Vendor Advisories

1
Microsoft
Windows Uniscribe Information Disclosure Vulnerability↗2017-09-12
▶

💬Community

1
Bugzilla
CVE-2016-8685 CVE-2016-8686 CVE-2016-8694 CVE-2016-8695 CVE-2016-8696 CVE-2016-8697 CVE-2016-8698 CVE-2016-8699 CVE-2016-8700 CVE-2016-8701 CVE-2016-8702 CVE-2016-8703 CVE-2017-7263 potrace: Multiple ↗2016-10-17
▶
CVE-2017-8695 (MEDIUM CVSS 5.3) | Windows Uniscribe in Microsoft Wind | cvebase.io