First published: Fri Mar 17 2017(Updated: )
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Uniscribe Remote Code Execution Vulnerability."
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows 7 | =sp1 | |
Microsoft Windows Server | =sp2 | |
Microsoft Windows Server | =r2-sp1 | |
Microsoft Windows Vista | =sp2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-0088 is classified as a critical vulnerability due to its potential for remote code execution.
To mitigate CVE-2017-0088, install the appropriate security updates provided by Microsoft for the affected software.
CVE-2017-0088 affects Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows Server 2008 R2 SP1, and Windows 7 SP1.
CVE-2017-0088 allows remote attackers to execute arbitrary code on vulnerable systems via malicious web content.
CVE-2017-0088 has been reported as being actively exploited in the wild, highlighting the urgency of applying patches.