CVE-2017-0118: Infoleak
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-0118?
CVE-2017-0118 is considered to have a moderate severity level due to the potential for information disclosure.
How do I fix CVE-2017-0118?
To fix CVE-2017-0118, ensure that you apply the latest security updates provided by Microsoft for your affected Windows version.
Which operating systems are affected by CVE-2017-0118?
CVE-2017-0118 affects multiple Windows versions including Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows 10 (various editions), and Windows Server 2008, 2012, and 2016.
What type of vulnerability is CVE-2017-0118?
CVE-2017-0118 is classified as an information disclosure vulnerability due to improper handling of process memory.
Can CVE-2017-0118 be exploited by attackers?
Yes, CVE-2017-0118 can be exploited by remote attackers to obtain sensitive information from a user’s process memory.