CVE-2017-0005

A flaw in Windows GDI (graphics system) allows a local user to run malicious code with higher privileges than their account normally permits. An attacker needs to run a specially crafted application on the affected computer to exploit this.

A privilege escalation vulnerability exists in the GDI subsystem affecting multiple Windows versions. The attack vector is local and requires execution of a malicious application by the compromised user; successful exploitation grants attacker code execution in a privileged context.