Main
Vulnerability Database
Exploits
ID:1250 - Exploit for Information disclosure in Windows and Windows Server - CVE-2017-0286
ID:1250 - Exploit for Information disclosure in Windows and Windows Server - CVE-2017-0286
Published: March 18, 2020
Vulnerability identifier: #VU7212
Vulnerability risk: Low
CVE-ID: CVE-2017-0286
CWE-ID: CWE-200
Exploitation vector: Remote access
Vulnerable software:
Windows
Windows Server
Windows
Windows Server
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to obtain potentially sensitive information.
The weakness exists due to improper handling of objects in memory by the Windows GDI component. A remote attacker can trick the victim into visiting a specially crafted website and read arbitrary files on the system.
Successful exploitation of the vulnerability may result in information disclosure.
The weakness exists due to improper handling of objects in memory by the Windows GDI component. A remote attacker can trick the victim into visiting a specially crafted website and read arbitrary files on the system.
Successful exploitation of the vulnerability may result in information disclosure.
Remediation
Install update from vendor's website.