Main Vulnerability Database Vulnerabilities #VU8295

Buffer overflow in Microsoft products - CVE-2017-8682

Published: September 12, 2017 / Updated: September 14, 2018

Vulnerability identifier: #VU8295

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-8682

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to boundary error when processing fonts within Win32k.sys driver. A remote unauthenticated attacker can create a specially crafted font, trick the victim into loading it and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

Microsoft Word
Microsoft Office
Microsoft Windows
Windows Server

How to mitigate CVE-2017-8682

Install updates from vendor's website.

Links to Public Exploits and PoC-codes

Exploit #1321 - Microsoft Windows Kernel win32k.sys TTF Font Processing - Out-of-Bounds Reads/Writes with Malformed 'fpgm' table (win32k!bGeneratePath) (March 18, 2020)

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8682

Related Security Bulletins

Remote code execution in Win32k Graphics in Microsoft Windows