CVE-2017-11842: Infoleak
First published: Wed Nov 15 2017(Updated: )
Windows kernel in Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windows kernel improperly initializing a memory address, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11849, CVE-2017-11851, and CVE-2017-11853.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =1511 | |
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1703 | |
| Microsoft Windows 10 | =1709 | |
| Microsoft Windows 8.1 | ||
| Microsoft Windows RT | ||
| Microsoft Windows Server | =1709 | |
| Microsoft Windows Server 2012 x64 | ||
| Microsoft Windows Server 2012 x64 | =r2 | |
| Microsoft Windows Server 2016 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-11842?
CVE-2017-11842 is rated as important due to the potential for an unauthorized attacker to execute malicious applications.
How do I fix CVE-2017-11842?
To fix CVE-2017-11842, apply the latest security updates provided by Microsoft for affected versions of Windows.
Which Windows versions are affected by CVE-2017-11842?
CVE-2017-11842 affects Windows 8.1, Windows RT 8.1, Windows 10 (various versions), and Windows Server 2012/R2, 2016, and 1709.
Can CVE-2017-11842 lead to remote code execution?
Yes, CVE-2017-11842 can allow an attacker to log in and run specially crafted applications, leading to potential remote code execution.
What components of Windows are involved in CVE-2017-11842?
CVE-2017-11842 involves the Windows kernel improperly initializing a memory address, which is critical for system security.
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/references
- agent/weakness
- agent/author
- agent/remedy
- agent/severity
- agent/tags
- agent/description
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/microsoft windows 10
- version/microsoft windows 10/1511
- version/microsoft windows 10/1607
- version/microsoft windows 10/1703
- version/microsoft windows 10/1709
- canonical/microsoft windows 8.1
- canonical/microsoft windows rt
- canonical/microsoft windows server
- version/microsoft windows server/1709
- canonical/microsoft windows server 2012 x64
- version/microsoft windows server 2012 x64/r2
- canonical/microsoft windows server 2016