Memory corruption in Microsoft Windows and Windows Server - CVE-2017-0108

Vulnerability identifier: #VU6060

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-0108

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The weakness exists due to improper handling of objects in memory by Windows Graphics Device Interface (GDI). A remote attacker can create a specially crafted Web site containing a malicious Word content, trick the victim into visiting it and execute arbitrary code with privileges of the current user.

Successful exploitation of the vulnerability may result in arbitrary code execution on the vulnerable system.

Microsoft Windows
Windows Server
Microsoft Silverlight
Microsoft Office
Microsoft Live Meeting
Microsoft Lync
Skype for Business

Install update from vendor's website.

• Exploit #1101 - Microsoft Windows - 'USP10!otlList::insertAt' Uniscribe Font Processing Heap-Based Buffer Overflow (MS17-011) (March 18, 2020)

• https://technet.microsoft.com/en-us/library/security/MS17-013

• Remote code execution in Microsoft Silverlight
• Multiple vulnerabilities in Skype
• Multiple vulnerabilities in Microsoft Lync
• Multiple vulnerabilities in Microsoft Live Meeting
• Multiple vulnerabilities in Microsoft Office
• Multiple vulnerabilities in Microsoft Windows
• Graphics Component Remote Code Execution Vulnerability