← back
CVE-2017-0120

CVE-2017-0120

EPSS 22.0%
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows Uniscribe Information Disclosure Vulnerability."
Affected products
n/a · Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2, and R2 SP1, and Windows 7 SP1.
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/41655/unverifiedexploitdbwww.exploit-db.com/exploits/41655unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0120https://www.exploit-db.com/exploits/41655/http://www.securityfocus.com/bid/96667http://www.securitytracker.com/id/1037992