microsoft windows-server-2008 CVE-2017-0073 vulnerability in Microsoft Products
Published on March 17, 2017

product logo product logo product logo
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows GDI+ Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0060 and CVE-2017-0062.

NVD


Products Associated with CVE-2017-0073

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Microsoft Windows Server 2008
Microsoft Live Meeting
Microsoft Windows Server 2012
Microsoft Lync
Microsoft Office
Microsoft Windows 10
Microsoft Windows 8.1
Microsoft Windows Server 2016
Microsoft Office Word Viewer
Microsoft Skype For Business
Microsoft Windows 7
Microsoft Windows Rt 8 1
Microsoft Windows Vista
Microsoft Skype For Business Basic

Affected Versions

Microsoft Corporation Windows GDI+ Version The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 is affected by CVE-2017-0073

Exploit Probability

EPSS
33.36%
Percentile
98.40%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.