CVE-2017-8677: Infoleak
The Windows GDI+ component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly discloses kernel memory addresses, aka "Win32k Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8678, CVE-2017-8680, CVE-2017-8681, and CVE-2017-8687.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-8677?
CVE-2017-8677 has a severity rating of important as it allows information disclosure.
How do I fix CVE-2017-8677?
To fix CVE-2017-8677, you should apply the latest security updates provided by Microsoft for affected versions.
What software is affected by CVE-2017-8677?
CVE-2017-8677 affects various Microsoft Windows versions, including Windows 7 SP1, 8.1, 10, and Server 2008, 2012, and 2016.
What attack vector does CVE-2017-8677 utilize?
CVE-2017-8677 can potentially be exploited through applications that process specially crafted GDI+ images.
Is there a workaround for CVE-2017-8677?
Currently, the best recommendation for CVE-2017-8677 is to install the available security updates as there are no known workarounds.