ID:1173 - Exploit for Information disclosure in Windows and Windows Server - CVE-2017-0245

 
Main Vulnerability Database Exploits ID:1173 - Exploit for Information disclosure in Windows and Windows Server - CVE-2017-0245

ID:1173 - Exploit for Information disclosure in Windows and Windows Server - CVE-2017-0245

Published: March 18, 2020


Vulnerability identifier: #VU6496
Vulnerability risk: Low
CVE-ID: CVE-2017-0245
CWE-ID: CWE-200
Exploitation vector: Local access
Vulnerable software:
Windows
Windows Server

Link to public exploit:


Vulnerability description

The vulnerability allows a local attacker to obtain potentially sensitive information on the target system.

The weakness exists  when the win32k component improperly provides kernel information. A local use can gain access to potentially sensitive information.

Successful exploitation of the vulnerability results in information disclosure.


Remediation

Install update from vendor's website.