CVE-2017-8702

Опубликовано: 13 сент. 2017

Источник: nvd

CVSS3: 7

CVSS2: 4.4

EPSS Низкий

Описание

Windows Error Reporting (WER) in Microsoft Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows an attacker to gain greater access to sensitive information and system functionality, due to the way that WER handles and executes files, aka "Windows Elevation of Privilege Vulnerability".

Ссылки

http://www.securityfocus.com/bid/100785
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039353
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8702
Patch
Vendor Advisory
http://www.securityfocus.com/bid/100785
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039353
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8702
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00889

Низкий

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2017-8702

CVSS3: 7.5

msrc

почти 8 лет назад

Windows Error Reporting Elevation of Privilege Vulnerability

GHSA-5xrm-53vv-xv34