ID:1324 - Exploit for Information disclosure in Windows and Windows Server - CVE-2017-8708

 
Main Vulnerability Database Exploits ID:1324 - Exploit for Information disclosure in Windows and Windows Server - CVE-2017-8708

ID:1324 - Exploit for Information disclosure in Windows and Windows Server - CVE-2017-8708

Published: March 18, 2020


Vulnerability identifier: #VU8310
Vulnerability risk: Low
CVE-ID: CVE-2017-8708
CWE-ID: CWE-200
Exploitation vector: Local access
Vulnerable software:
Windows
Windows Server

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to obtain potentially sensitive information.

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, allowing an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (KASLR) bypass. A local user can gain access to potentially sensitive information.


Remediation

Install updates from vendor's website.