CVE-2017-8588

EPSS 17.2%

Vexday Risk Score

8Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 17.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

11 Jul 2017Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Microsoft WordPad in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it parses specially crafted files, aka "WordPad Remote Code Execution Vulnerability".

Affected products

Microsoft Corporation · Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8588 http://www.securityfocus.com/bid/99400 http://www.securitytracker.com/id/1038857