NVD

Id
82968  
Name
CVE-2017-0057  
Description
DNS client in Microsoft Windows 8.1; Windows Server 2012 R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 fails to properly process DNS queries, which allows remote attackers to obtain sensitive information via (1) convincing a workstation user to visit an untrusted webpage or (2) tricking a server into sending a DNS query to a malicious DNS server, aka Windows DNS Query Information Disclosure Vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2017-03-16  
Modified Date
2017-07-11  
Seq
2017-0057  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
408556 82968 CVE-2017-5023 95792  View
408557 82968 CVE-2017-5023 https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html  View
408558 82968 CVE-2017-5023 https://crbug.com/651443  View
410618 82968 CVE-2017-0051 96026  View
410619 82968 CVE-2017-0051 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0051  View
410620 82968 CVE-2017-0051 96026  View
410621 82968 CVE-2017-0051 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0051  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65498 JVNDB-2017-001861 複数の Microsoft Windows 製品の DNS クライアントにおける重要な情報を取得される脆弱性 複数の Microsoft Windows 製品の DNS クライアントは、DNS クエリを適切に処理しないため、重要な情報を取得される脆弱性が存在します。 CVE-2017-0057 CVE-2017-0057 82968 4.3 4.3 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-001861.html 2017-03-14 2017-03-22 View