ID:1104 - Exploit for Information disclosure in Windows and Windows Server - CVE-2017-0111
Published: March 18, 2020
Windows
Windows Server
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to improper disclosure of memory contents in Windows Uniscribe. A remote unauthenticated attacker can trick the victim into opening a specially crafted document or visiting a malformed web page and gain access to potentially sensitive information.
Successful exploitation of this vulnerability may allow an attacker to gain access to potentially sensitive data.
Remediation
Install updates from vendor's website.