CVE-2017-8533: Microsoft Windows DirectWrite Integer Overflow Information Disclosure Vulnerability
First published: Thu Jun 15 2017(Updated: )
Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka "Graphics Uniscribe Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0286, CVE-2017-0287, CVE-2017-0288, CVE-2017-0289, CVE-2017-8531, and CVE-2017-8532.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Office | =2007-sp3 | |
| Microsoft Office | =2010-sp2 | |
| Windows 10 | ||
| Windows 10 | =1511 | |
| Windows 10 | =1607 | |
| Windows 10 | =1703 | |
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows | ||
| Microsoft Windows RT | ||
| Microsoft Windows Server | =sp2 | |
| Microsoft Windows Server | =r2-sp1 | |
| Microsoft Windows Server | ||
| Microsoft Windows Server | =r2 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Operating System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-8533?
CVE-2017-8533 has a medium severity rating that indicates a potential risk of memory disclosure.
How do I fix CVE-2017-8533?
To fix CVE-2017-8533, you should apply the latest security updates and patches provided by Microsoft for the affected Windows and Office versions.
What versions of Windows are affected by CVE-2017-8533?
CVE-2017-8533 affects multiple Windows versions including Windows 7, 8.1, 10, and various Windows Server editions.
Is Microsoft Office affected by CVE-2017-8533?
Yes, Microsoft Office 2007 SP3 and Office 2010 SP2 are among the affected versions in CVE-2017-8533.
What type of vulnerability is CVE-2017-8533?
CVE-2017-8533 is classified as an information disclosure vulnerability related to improper memory management in graphics processing.
- agent/type
- agent/weakness
- agent/title
- agent/author
- agent/remedy
- agent/references
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/trending
- agent/source
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-19-581
- alias/ZDI-CAN-8331
- alias/CVE-2017-8533
- agent/software-canonical-lookup
- vendor/microsoft
- canonical/microsoft office
- version/microsoft office/2007-sp3
- version/microsoft office/2010-sp2
- canonical/windows 10
- version/windows 10/1511
- version/windows 10/1607
- version/windows 10/1703
- canonical/microsoft windows 7
- version/microsoft windows 7/sp1
- canonical/microsoft windows
- canonical/microsoft windows rt
- canonical/microsoft windows server
- version/microsoft windows server/sp2
- version/microsoft windows server/r2-sp1
- version/microsoft windows server/r2
- canonical/microsoft windows server 2016
- canonical/microsoft windows operating system