ID:1174 - Exploit for Privilege escalation in Windows and Windows Server - CVE-2017-0214

 
Main Vulnerability Database Exploits ID:1174 - Exploit for Privilege escalation in Windows and Windows Server - CVE-2017-0214

ID:1174 - Exploit for Privilege escalation in Windows and Windows Server - CVE-2017-0214

Published: March 18, 2020


Vulnerability identifier: #VU6497
Vulnerability risk: Low
CVE-ID: CVE-2017-0214
CWE-ID: CWE-264
Exploitation vector: Local access
Vulnerable software:
Windows
Windows Server

Link to public exploit:


Vulnerability description

The vulnerability allows a local attacker to gain elevated privileges.

The weakness exists due to improper input validation before loading type libraries. A local attacker can execute a specially crafted application to gain root privileges on the system.



Remediation

Install update from vendor's website.