ID:1242 - Exploit for Information disclosure in Windows and Windows Server - CVE-2017-8472

 
Main Vulnerability Database Exploits ID:1242 - Exploit for Information disclosure in Windows and Windows Server - CVE-2017-8472

ID:1242 - Exploit for Information disclosure in Windows and Windows Server - CVE-2017-8472

Published: March 18, 2020


Vulnerability identifier: #VU7094
Vulnerability risk: Low
CVE-ID: CVE-2017-8472
CWE-ID: CWE-200
Exploitation vector: Local access
Vulnerable software:
Windows
Windows Server

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory within win32k.sys system driver. A local user can obtain portions of potentially sensitive information from system memory.


Remediation

Install updates from vendor's website.