CVE-2017-0039: Input Validation

Published Mar 17, 2017

Updated

Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle dynamic link library (DLL) loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."

Affected Software

2 affected components

Microsoft Windows Server 2008=sp2

Microsoft Windows Vista=sp2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0039

Event History

Mar 17, 2017

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-0039?

CVE-2017-0039 is rated as 'Important' in its severity, indicating a significant potential impact on affected systems.

How do I fix CVE-2017-0039?

To fix CVE-2017-0039, apply the security updates provided by Microsoft for Windows Vista SP2 and Windows Server 2008 SP2.

Who is affected by CVE-2017-0039?

CVE-2017-0039 affects local users running Microsoft Windows Vista SP2 and Windows Server 2008 SP2.

What type of attack is associated with CVE-2017-0039?

CVE-2017-0039 is associated with local privilege escalation attacks via crafted applications.

Can CVE-2017-0039 be exploited remotely?

CVE-2017-0039 requires local access to exploit, making it not a remote vulnerability.