CVE-2017-11832

Опубликовано: 15 нояб. 2017

Источник: nvd

CVSS3: 4.7

CVSS2: 1.9

EPSS Низкий

Описание

The Microsoft Windows embedded OpenType (EOT) font engine in Windows 7 SP1, Windows Server 2008 SP2 and 2008 R2 SP1, and Windows Server 2012 allows an attacker to potentially read data that was not intended to be disclosed, due to the way that the Microsoft Windows EOT font engine parses specially crafted embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability." This CVE ID is unique from CVE-2017-11835.

Ссылки

http://www.securityfocus.com/bid/101726
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039782
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11832
Patch
Vendor Advisory
http://www.securityfocus.com/bid/101726
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039782
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11832
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01143

Низкий

4.7 Medium

CVSS3

1.9 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2017-11832

CVSS3: 4.7

msrc

больше 7 лет назад

Windows EOT Font Engine Information Disclosure Vulnerability

GHSA-3vgj-5w55-27c9

CVSS3: 4.7

github

около 3 лет назад

EPSS

Процентиль: 77%

0.01143

Низкий

4.7 Medium

CVSS3

1.9 Low

CVSS2

Дефекты

CWE-200