ID:1104 - Exploit for Information disclosure in Windows and Windows Server - CVE-2017-0111

 
Main Vulnerability Database Exploits ID:1104 - Exploit for Information disclosure in Windows and Windows Server - CVE-2017-0111

ID:1104 - Exploit for Information disclosure in Windows and Windows Server - CVE-2017-0111

Published: March 18, 2020


Vulnerability identifier: #VU6064
Vulnerability risk: Low
CVE-ID: CVE-2017-0111
CWE-ID: CWE-200
Exploitation vector: Remote access
Vulnerable software:
Windows
Windows Server

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to improper disclosure of memory contents in Windows Uniscribe. A remote unauthenticated attacker can trick the victim into opening a specially crafted document or visiting a malformed web page and gain access to potentially sensitive information.

Successful exploitation of this vulnerability may allow an attacker to gain access to potentially sensitive data.


Remediation

Install updates from vendor's website.