CVE-2017-11850

EPSS 2.9%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 2.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 nov 2017Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Microsoft Graphics Component in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to log on to an affected system and run a specially crafted application due to improper handling of objects in memory, aka "Microsoft Graphics Component Information Disclosure Vulnerability".

Productos afectados

Microsoft Corporation · Microsoft Graphics Component

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11850 http://www.securityfocus.com/bid/101738 http://www.securitytracker.com/id/1039782