Buffer overflow in Microsoft Windows and Windows Server - CVE-2017-0296

Vulnerability identifier: #VU7037

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-0296

CWE-ID: CWE-120

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists due to boundary error when checking the length of a buffer by tdx.sys. A local attacker can run a specially crafted application to gain system privileges and run processes in an elevated context.

Successful exploitation of the vulnerability results privilege escalation.

Microsoft Windows
Windows Server

Install update from vendor's website.

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0296

• Multiple vulnerabilities in Microsoft Windows
• Windows TDX Elevation of Privilege Vulnerability