NVD

Id
82509  
Name
CVE-2017-0038  
Description
gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process heap memory via a crafted EMF file, as demonstrated by an EMR_SETDIBITSTODEVICE record with modified Device Independent Bitmap (DIB) dimensions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-3216, CVE-2016-3219, and/or CVE-2016-3220.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-03-29  
Published
2017-02-20  
Modified Date
2017-03-27  
Seq
2017-0038  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
406998 82509 CVE-2017-5144 95411  View
406999 82509 CVE-2017-5144 https://ics-cert.us-cert.gov/advisories/ICSA-17-012-03  View
407000 82509 CVE-2017-5144 95411  View
407001 82509 CVE-2017-5144 https://ics-cert.us-cert.gov/advisories/ICSA-17-012-03  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65512 JVNDB-2017-001875 複数の Microsoft Windows 製品の Graphics Device Interface の gdi32.dll におけるプロセスのヒープメモリから重要な情報を取得される脆弱性 複数の Microsoft Windows 製品の Graphics Device Interface (GDI) の gdi32.dll には、プロセスのヒープメモリから重要な情報を取得される脆弱性が存在します。 CVE-2017-0038 CVE-2017-0038 82509 4.3 5.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-001875.html 2017-03-14 2017-03-22 View