Multiple vulnerabilities in Windows Uniscribe

Description

Multiple serious vulnerabilities have been found in Windows Uniscribe. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An improper handling of objects in memory can be exploted remotely via a specially designed website or a specially designed document file to execute arbitrary code;
2. An improper disclosure of the contents of Windows Uniscribe memory can be exploited remotely via a specially designed document or by convincing a user to visit an untrusted webpage to obtain sensitive information.

Original advisories

• MS17-011

• CVE-2017-0072
• CVE-2017-0083
• CVE-2017-0084
• CVE-2017-0085
• CVE-2017-0086
• CVE-2017-0087
• CVE-2017-0088
• CVE-2017-0089
• CVE-2017-0090
• CVE-2017-0091
• CVE-2017-0092
• CVE-2017-0111
• CVE-2017-0112
• CVE-2017-0113
• CVE-2017-0114
• CVE-2017-0115
• CVE-2017-0116
• CVE-2017-0117
• CVE-2017-0118
• CVE-2017-0119
• CVE-2017-0120
• CVE-2017-0121
• CVE-2017-0122
• CVE-2017-0123
• CVE-2017-0124
• CVE-2017-0125
• CVE-2017-0126
• CVE-2017-0127
• CVE-2017-0128

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Windows-Vista-4
• Microsoft-Windows-Server-2012
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT
• Microsoft-Windows-10

CVE list

• CVE-2017-0072
  critical
• CVE-2017-0083
  critical
• CVE-2017-0084
  critical
• CVE-2017-0085
  warning
• CVE-2017-0086
  critical
• CVE-2017-0087
  critical
• CVE-2017-0088
  critical
• CVE-2017-0089
  critical
• CVE-2017-0090
  critical
• CVE-2017-0091
  warning
• CVE-2017-0092
  warning
• CVE-2017-0111
  warning
• CVE-2017-0112
  warning
• CVE-2017-0113
  warning
• CVE-2017-0114
  warning
• CVE-2017-0115
  warning
• CVE-2017-0116
  warning
• CVE-2017-0117
  warning
• CVE-2017-0118
  warning
• CVE-2017-0119
  warning
• CVE-2017-0120
  warning
• CVE-2017-0121
  warning
• CVE-2017-0122
  warning
• CVE-2017-0123
  warning
• CVE-2017-0124
  warning
• CVE-2017-0125
  warning
• CVE-2017-0126
  warning
• CVE-2017-0127
  warning
• CVE-2017-0128
  warning

KB list

• 4012217
• 4012215
• 4012216
• 4012606
• 4013198
• 4013429
• 4012212
• 4012214
• 4012213
• 4013076
• 4012583

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com