CVE-2017-8587: Medium severity Microsoft Windows 10 vulnerability

Published Jul 11, 2017

Updated

Windows Explorer in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511 allows a denial of service vulnerability when it attempts to open a non-existent file, aka "Windows Explorer Denial of Service Vulnerability".

Affected Software

9 affected components

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8587

Event History

Jul 11, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-8587?

CVE-2017-8587 has a severity rating that allows for a denial of service attack when Windows Explorer attempts to open a non-existent file.

How does CVE-2017-8587 affect Windows systems?

CVE-2017-8587 affects multiple Windows operating systems, including Windows 7 SP1, Windows 8.1, and Windows 10, leading to potential system unresponsiveness.

How do I fix CVE-2017-8587?

To fix CVE-2017-8587, ensure your Windows operating system is updated with the latest security patches provided by Microsoft.

What versions of Windows are vulnerable to CVE-2017-8587?

CVE-2017-8587 affects Windows 7 SP1, Windows 8.1, Windows 10, and Windows Server editions including 2008 and 2012.

What type of attack is facilitated by CVE-2017-8587?

CVE-2017-8587 allows attackers to execute a denial of service attack by causing the system to become unresponsive.