Main Vulnerability Database Vulnerabilities #VU13013

Information disclosure in Microsoft Windows and Windows Server - CVE-2017-8462

Published: June 13, 2017 / Updated: September 14, 2018

Vulnerability identifier: #VU13013

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-8462

CWE-ID: CWE-200

Exploitation vector: Local access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a local attacker to obtain potentially sensitive information.

The vulnerability exists due to improper initialization of a memory address by the Windows kernel. A local attacker can run a specially crafted application, trigger memory corruption and gain access to potentially sensitive information.

Successful exploitation of the vulnerability may result in Kernel Address Space Layout Randomization (KASLR) bypass.

Affected software

Microsoft Windows
Windows Server

How to mitigate CVE-2017-8462

Install updates from vendor's website.

Links to Public Exploits and PoC-codes

Exploit #1417 - Microsoft Windows - 'nt!NtQueryVolumeInformationFile (FileFsVolumeInformation)' Kernel Pool Memory Disclosure (March 18, 2020)

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8462

Related Security Bulletins

Information disclosure in Microsoft Windows