KLA10987
Information disclosure in Windows DVD Maker
Updated: 06/01/2019
Detect date
?
03/14/2017
Severity
?
Warning
Description

An improper parsing of .msdvd files was found in Windows DVD maker. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a specially designed .msdvd file.

Affected products

Windows Vista Service Pack 2
Windows 7 Service Pack 1

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories

MS17-020
CVE-2017-0045

Impacts
?
ACE 
[?]

OSI 
[?]

DoS 
[?]

SB 
[?]

PE 
[?]
Related products
Microsoft Windows Vista
Microsoft Windows 7
CVE-IDS
?
CVE-2017-00454.3Warning
Microsoft official advisories
Microsoft Security Update Guide
KB list

4012215
4012212
3205715
3208223