NVD

Id
86890  
Name
CVE-2017-0296  
Description
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to elevate privilege when tdx.sys fails to check the length of a buffer prior to copying memory to it, aka Windows TDX Elevation of Privilege Vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-06-23  
Published
2017-06-14  
Modified Date
2017-06-21  
Seq
2017-0296  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
421265 86890 CVE-2016-9959 SUSE-SA:2016:3250  View
421266 86890 CVE-2016-9959 openSUSE-SA:2017:0022  View
421267 86890 CVE-2016-9959 [oss-security] 20161215 Re: CVE Request: Game Music Emulators: incorrect emulation of the SPC700 audio co-processor of SNES: arbitrary code execution via malformed SPC music file  View
421268 86890 CVE-2016-9959 95305  View
421269 86890 CVE-2016-9959 https://bitbucket.org/mpyne/game-music-emu/wiki/Home  View
421270 86890 CVE-2016-9959 FEDORA-2016-04383482b4  View
421271 86890 CVE-2016-9959 FEDORA-2017-5bf9a268df  View
421272 86890 CVE-2016-9959 FEDORA-2016-fbf9f8b204  View
421273 86890 CVE-2016-9959 FEDORA-2017-3d771a1702  View
421274 86890 CVE-2016-9959 https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68071 JVNDB-2017-004353 複数の Microsoft Windows 製品における権限を昇格される脆弱性 複数の Microsoft Windows 製品には、tdx.sys がメモリをコピーする前にバッファ長の確認に失敗した場合、権限を昇格される脆弱性が存在します。 CVE-2017-0296 0 CVE-2017-0296 86890 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004353.html 2017-06-13 2017-06-22 View