CVE-2017-0051

Description

Microsoft Windows 10 1607 and Windows Server 2016 allow remote attackers to cause a denial of service (application hang) via a crafted Office document, aka Microsoft Hyper-V Network Switch Denial of Service Vulnerability. This vulnerability is different from those described in CVE-2017-0074, CVE-2017-0076, CVE-2017-0097, CVE-2017-0098, and CVE-2017-0099.

Risk Information

Base Score
4.7
MODERATE
Vector
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
0.514

Associated Vulnerability

VulnerabilityOS Platform
Microsoft Browser Spoofing Vulnerability for Windows Server 2016 for x64-based Systems (KB4013429) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4013429) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1607 (KB4013429) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 for x64-based Systems (KB4012606) - CumulativeWindows
Windows Uniscribe Information Disclosure Vulnerability for Windows 7 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012212)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows 7 - WannaCrypt Ransomware Worm(KB4012212)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows Server 2008 R2 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012212)Windows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1511 for x64-based Systems (KB4013198) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1511 (KB4013198) - CumulativeWindows
Windows Uniscribe Information Disclosure Vulnerability for Windows 8.1 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012213)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows 8.1 - WannaCrypt Ransomware Worm(KB4012213)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows Server 2012 R2 - WannaCrypt Ransomware Worm (KB4012213)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows Server 2012 - WannaCrypt Ransomware Worm(KB4012214)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows Embedded 8 Standard for x64-based Systems (KB4012214)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows Embedded 8 Standard (KB4012214)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-22054Cumulative Update for Windows Server 2016 for x64-based Systems (KB4013429)
PATCH-22053Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4013429)
PATCH-22052Cumulative Update for Windows 10 Version 1607 (KB4013429)
PATCH-22049Cumulative Update for Windows 10 for x64-based Systems (KB4012606)
PATCH-22063March, 2017 Security Only Quality Update for Windows 7 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012212)
PATCH-22062March, 2017 Security Only Quality Update for Windows 7 - WannaCrypt Ransomware Worm(KB4012212)
PATCH-22064March, 2017 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012212)
PATCH-22051Cumulative Update for Windows 10 Version 1511 for x64-based Systems (KB4013198)
PATCH-22050Cumulative Update for Windows 10 Version 1511 (KB4013198)
PATCH-22066March, 2017 Security Only Quality Update for Windows 8.1 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012213)
PATCH-22065March, 2017 Security Only Quality Update for Windows 8.1 - WannaCrypt Ransomware Worm(KB4012213)
PATCH-22067March, 2017 Security Only Quality Update for Windows Server 2012 R2 - WannaCrypt Ransomware Worm (KB4012213)
PATCH-22070March, 2017 Security Only Quality Update for Windows Server 2012 - WannaCrypt Ransomware Worm(KB4012214)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234