First published: Thu Jun 15 2017(Updated: )
Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file, aka "Windows PDF Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0292.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows 10 | ||
Microsoft Windows 10 | =1511 | |
Microsoft Windows 10 | =1607 | |
Microsoft Windows 10 | =1703 | |
Microsoft Windows 8.1 | ||
Microsoft Windows RT | ||
Microsoft Windows Server 2012 x64 | ||
Microsoft Windows Server 2012 x64 | =r2 | |
Microsoft Windows Server 2016 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-0291 has a severity rating that allows for remote code execution, making it critical to address.
To fix CVE-2017-0291, you need to apply the latest security updates provided by Microsoft for affected Windows versions.
CVE-2017-0291 affects Windows 10, Windows 8.1, Windows Server 2012, Server 2012 R2, and Windows RT 8.1 among others.
CVE-2017-0291 is classified as a remote code execution vulnerability that arises from handling specially crafted PDF files.
Exploitation of CVE-2017-0291 requires an attacker to have the ability to convince users to open a malicious PDF document.