cnvd - cnvd-2017-32662

CNVD-2017-32662

Vulnerability from cnvd - Published: 2017-11-03

Title

Microsoft Windows GDI+信息泄露漏洞（CNVD-2017-32662）

Description

Microsoft Windows是一款流行的操作系统。 Microsoft Windows GDI存在安全漏洞，允许攻击者利用漏洞提交特殊的请求，获取敏感信息。

Severity

低

Patch Name

Microsoft Windows GDI+信息泄露漏洞（CNVD-2017-32662）的补丁

Patch Description

Microsoft Windows是一款流行的操作系统。 Microsoft Windows GDI存在安全漏洞，允许攻击者利用漏洞提交特殊的请求，获取敏感信息。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

用户可参考如下厂商提供的安全补丁以修复该漏洞： https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8676

Reference

https://nvd.nist.gov/vuln/detail/CVE-2017-8676

Impacted products

Name
['Microsoft Windows Server 2008 R2 SP1', 'Microsoft Windows Server 2008 SP2', 'Microsoft Windows 7 SP1', 'Microsoft Office 2007 SP3', 'Microsoft Office Word Viewer null', 'Microsoft Lync 2010', 'Microsoft Windows 8.1', 'Microsoft Windows RT 8.1 SP0', 'Microsoft Office 2010 SP2', 'Microsoft Windows Server 2012 R2', 'Microsoft Windows server 2012 Gold', 'Microsoft Windows 10 Gold', 'Microsoft Windows 10 1511', 'Microsoft Lync 2013 SP1', 'Microsoft Lync 2010 Attendee', 'Microsoft Windows 10 1607', 'Microsoft Windows 10 1703', 'Microsoft Skype for Business 2016']

Name

['Microsoft Windows Server 2008 R2 SP1', 'Microsoft Windows Server 2008 SP2', 'Microsoft Windows 7 SP1', 'Microsoft Office 2007 SP3', 'Microsoft Office Word Viewer null', 'Microsoft Lync 2010', 'Microsoft Windows 8.1', 'Microsoft Windows RT 8.1 SP0', 'Microsoft Office 2010 SP2', 'Microsoft Windows Server 2012 R2', 'Microsoft Windows server 2012 Gold', 'Microsoft Windows 10 Gold', 'Microsoft Windows 10 1511', 'Microsoft Lync 2013 SP1', 'Microsoft Lync 2010 Attendee', 'Microsoft Windows 10 1607', 'Microsoft Windows 10 1703', 'Microsoft Skype for Business 2016']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "100755"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-8676"
    }
  },
  "description": "Microsoft Windows\u662f\u4e00\u6b3e\u6d41\u884c\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nMicrosoft Windows GDI\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u63d0\u4ea4\u7279\u6b8a\u7684\u8bf7\u6c42\uff0c\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002",
  "discovererName": "bear13oy of CloverSec Labs working with Trend Micro\u0027s Zero Day Initiative, and Weibo Wang (@ma1fan) of 360 SkyEye Labs",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1a\r\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8676",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-32662",
  "openTime": "2017-11-03",
  "patchDescription": "Microsoft Windows\u662f\u4e00\u6b3e\u6d41\u884c\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nMicrosoft Windows GDI\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u63d0\u4ea4\u7279\u6b8a\u7684\u8bf7\u6c42\uff0c\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Microsoft Windows GDI+\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff08CNVD-2017-32662\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Microsoft Windows Server 2008 R2 SP1",
      "Microsoft Windows Server 2008 SP2",
      "Microsoft Windows 7 SP1",
      "Microsoft Office 2007 SP3",
      "Microsoft Office Word Viewer null",
      "Microsoft Lync 2010",
      "Microsoft Windows 8.1",
      "Microsoft Windows RT 8.1 SP0",
      "Microsoft Office 2010 SP2",
      "Microsoft Windows Server 2012 R2",
      "Microsoft Windows server 2012 Gold",
      "Microsoft Windows 10 Gold",
      "Microsoft Windows 10  1511",
      "Microsoft Lync 2013 SP1",
      "Microsoft Lync 2010 Attendee",
      "Microsoft Windows 10 1607",
      "Microsoft Windows 10 1703",
      "Microsoft Skype for Business 2016"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2017-8676",
  "serverity": "\u4f4e",
  "submitTime": "2017-09-13",
  "title": "Microsoft Windows GDI+\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff08CNVD-2017-32662\uff09"
}

CVE-2017-8676 (GCVE-0-2017-8676)

Vulnerability from cvelistv5 – Published: 2017-09-13 01:00 – Updated: 2024-09-17 04:25

Summary

The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an authenticated attacker to retrieve information from a targeted system via a specially crafted application, aka "Windows GDI+ Information Disclosure Vulnerability."

Severity ?

No CVSS data available.

CWE

Information Disclosure

Assigner

microsoft

References

URL

Tags

	http://www.securityfocus.com/bid/100755	vdb-entryx_refsource_BID
	http://www.securitytracker.com/id/1039333	vdb-entryx_refsource_SECTRACK
	https://portal.msrc.microsoft.com/en-US/security-…	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Microsoft Corporation	Windows Graphics Device Interface (GDI)	Affected: Microsoft Windows Server 2008 SP2 and R2 SP1 Affected: Windows 7 SP1 Affected: Windows 8.1 Affected: Windows Server 2012 Gold and R2 Affected: Windows RT 8.1 Affected: Windows 10 Gold, 1511, 1607, 1703, and Server 2016 Affected: Office 2007 SP3 Affected: Office 2010 SP2 Affected: Word Viewer Affected: Office for Mac 2011 and 2016 Affected: Skype for Business 2016 Affected: Lync 2013 SP1 Affected: Lync 2010 Affected: Lync 2010 Attendee Affected: Live Meeting 2007 Add-in and Console

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:41:24.414Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "100755",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100755"
          },
          {
            "name": "1039333",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039333"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8676"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Windows Graphics Device Interface (GDI)",
          "vendor": "Microsoft Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Microsoft Windows Server 2008 SP2 and R2 SP1"
            },
            {
              "status": "affected",
              "version": "Windows 7 SP1"
            },
            {
              "status": "affected",
              "version": "Windows 8.1"
            },
            {
              "status": "affected",
              "version": "Windows Server 2012 Gold and R2"
            },
            {
              "status": "affected",
              "version": "Windows RT 8.1"
            },
            {
              "status": "affected",
              "version": "Windows 10 Gold, 1511, 1607, 1703, and Server 2016"
            },
            {
              "status": "affected",
              "version": "Office 2007 SP3"
            },
            {
              "status": "affected",
              "version": "Office 2010 SP2"
            },
            {
              "status": "affected",
              "version": "Word Viewer"
            },
            {
              "status": "affected",
              "version": "Office for Mac 2011 and 2016"
            },
            {
              "status": "affected",
              "version": "Skype for Business 2016"
            },
            {
              "status": "affected",
              "version": "Lync 2013 SP1"
            },
            {
              "status": "affected",
              "version": "Lync 2010"
            },
            {
              "status": "affected",
              "version": "Lync 2010 Attendee"
            },
            {
              "status": "affected",
              "version": "Live Meeting 2007 Add-in and Console"
            }
          ]
        }
      ],
      "datePublic": "2017-09-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an authenticated attacker to retrieve information from a targeted system via a specially crafted application, aka \"Windows GDI+ Information Disclosure Vulnerability.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-13T09:57:01",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "100755",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100755"
        },
        {
          "name": "1039333",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039333"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8676"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "DATE_PUBLIC": "2017-09-12T00:00:00",
          "ID": "CVE-2017-8676",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Windows Graphics Device Interface (GDI)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Microsoft Windows Server 2008 SP2 and R2 SP1"
                          },
                          {
                            "version_value": "Windows 7 SP1"
                          },
                          {
                            "version_value": "Windows 8.1"
                          },
                          {
                            "version_value": "Windows Server 2012 Gold and R2"
                          },
                          {
                            "version_value": "Windows RT 8.1"
                          },
                          {
                            "version_value": "Windows 10 Gold, 1511, 1607, 1703, and Server 2016"
                          },
                          {
                            "version_value": "Office 2007 SP3"
                          },
                          {
                            "version_value": "Office 2010 SP2"
                          },
                          {
                            "version_value": "Word Viewer"
                          },
                          {
                            "version_value": "Office for Mac 2011 and 2016"
                          },
                          {
                            "version_value": "Skype for Business 2016"
                          },
                          {
                            "version_value": "Lync 2013 SP1"
                          },
                          {
                            "version_value": "Lync 2010"
                          },
                          {
                            "version_value": "Lync 2010 Attendee"
                          },
                          {
                            "version_value": "Live Meeting 2007 Add-in and Console"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Microsoft Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an authenticated attacker to retrieve information from a targeted system via a specially crafted application, aka \"Windows GDI+ Information Disclosure Vulnerability.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "100755",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100755"
            },
            {
              "name": "1039333",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039333"
            },
            {
              "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8676",
              "refsource": "CONFIRM",
              "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8676"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2017-8676",
    "datePublished": "2017-09-13T01:00:00Z",
    "dateReserved": "2017-05-03T00:00:00",
    "dateUpdated": "2024-09-17T04:25:38.375Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2017-32662

CVE-2017-8676 (GCVE-0-2017-8676)

Tags

Sightings

Nomenclature