Multiple vulnerabilities in Windows Uniscribe

Описание

Multiple serious vulnerabilities have been found in Windows Uniscribe. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An improper handling of objects in memory can be exploted remotely via a specially designed website or a specially designed document file to execute arbitrary code;
2. An improper disclosure of the contents of Windows Uniscribe memory can be exploited remotely via a specially designed document or by convincing a user to visit an untrusted webpage to obtain sensitive information.

Первичный источник обнаружения

• MS17-011
  CVE-2017-0072
  CVE-2017-0083
  CVE-2017-0084
  CVE-2017-0085
  CVE-2017-0086
  CVE-2017-0087
  CVE-2017-0088
  CVE-2017-0089
  CVE-2017-0090
  CVE-2017-0091
  CVE-2017-0092
  CVE-2017-0111
  CVE-2017-0112
  CVE-2017-0113
  CVE-2017-0114
  CVE-2017-0115
  CVE-2017-0116
  CVE-2017-0117
  CVE-2017-0118
  CVE-2017-0119
  CVE-2017-0120
  CVE-2017-0121
  CVE-2017-0122
  CVE-2017-0123
  CVE-2017-0124
  CVE-2017-0125
  CVE-2017-0126
  CVE-2017-0127
  CVE-2017-0128
  

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• Microsoft-Windows-Vista-2
• Microsoft-Windows-Server-2012
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT
• Microsoft-Windows-10

Список CVE

• CVE-2017-0072
  critical
• CVE-2017-0083
  critical
• CVE-2017-0084
  critical
• CVE-2017-0085
  warning
• CVE-2017-0086
  critical
• CVE-2017-0087
  critical
• CVE-2017-0088
  critical
• CVE-2017-0089
  critical
• CVE-2017-0090
  critical
• CVE-2017-0091
  warning
• CVE-2017-0092
  warning
• CVE-2017-0111
  warning
• CVE-2017-0112
  warning
• CVE-2017-0113
  warning
• CVE-2017-0114
  warning
• CVE-2017-0115
  warning
• CVE-2017-0116
  warning
• CVE-2017-0117
  warning
• CVE-2017-0118
  warning
• CVE-2017-0119
  warning
• CVE-2017-0120
  warning
• CVE-2017-0121
  warning
• CVE-2017-0122
  warning
• CVE-2017-0123
  warning
• CVE-2017-0124
  warning
• CVE-2017-0125
  warning
• CVE-2017-0126
  warning
• CVE-2017-0127
  warning
• CVE-2017-0128
  warning

Список KB

• 4012217
• 4012215
• 4012216
• 4012606
• 4013198
• 4013429
• 4012212
• 4012214
• 4012213
• 4013076
• 4012583

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com