CVE-2017-8533

Description

Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka Graphics Uniscribe Information Disclosure Vulnerability. This CVE ID is unique from CVE-2017-0286, CVE-2017-0287, CVE-2017-0288, CVE-2017-0289, CVE-2017-8531, and CVE-2017-8532.

Risk Information

Base Score
4.5
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
24.455

Associated Vulnerability

VulnerabilityOS Platform
Windows Kernel Information Disclosure Vulnerability for Windows Server 2008 for x64-based Systems (KB4022887)Windows
Windows Kernel Information Disclosure Vulnerability for Windows Server 2008 (KB4022887)Windows
Windows Uniscribe Remote Code Execution Vulnerability for Windows Server 2008 for x64-based Systems (KB4022884)Windows
Windows Uniscribe Remote Code Execution Vulnerability for Windows Server 2008 (KB4022884)Windows
Windows Kernel Information Disclosure Vulnerability for Windows Server 2008 for x64-based Systems (KB4022013)Windows
Windows Kernel Information Disclosure Vulnerability for Windows Server 2008 (KB4022013)Windows
Microsoft Browser Information Disclosure Vulnerability for Internet Explorer 10 for Windows Server 2012 (KB4021558) - CumulativeWindows
Microsoft Browser Information Disclosure Vulnerability for Internet Explorer 11 for Windows Server 2012 R2 (KB4021558) - CumulativeWindows
Microsoft Browser Information Disclosure Vulnerability for Internet Explorer 11 for Windows 8.1 (KB4021558) - CumulativeWindows
Microsoft Browser Information Disclosure Vulnerability for Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems (KB4021558) - CumulativeWindows
Microsoft Browser Information Disclosure Vulnerability for Internet Explorer 11 for Windows 7 (KB4021558) - CumulativeWindows
Microsoft Browser Information Disclosure Vulnerability for Internet Explorer 9 for Windows Server 2008 for x64-based Systems (KB4021558) - CumulativeWindows
Microsoft Browser Information Disclosure Vulnerability for Internet Explorer 9 for Windows Server 2008 (KB4021558) - CumulativeWindows
Windows Kernel Information Disclosure Vulnerability for Windows Server 2008 for x64-based Systems (KB4022883)Windows
Windows Kernel Information Disclosure Vulnerability for Windows Server 2008 (KB4022883)Windows
Hypervisor Code Integrity Elevation of Privilege Vulnerability for Windows Server 2008 for x64-based Systems (KB3217845)Windows
Microsoft Office Remote Code Execution Vulnerability for Windows Server 2008 for x64-based Systems (KB4018106)Windows
Microsoft Office Remote Code Execution Vulnerability for Windows Server 2008 (KB4018106)Windows
Windows Kernel Information Disclosure Vulnerability for Windows Server 2008 for x64-based Systems (KB4022010)Windows
Windows Kernel Information Disclosure Vulnerability for Windows Server 2008 (KB4022010)Windows
Windows TDX Elevation of Privilege Vulnerability for Windows Server 2008 for x64-based Systems (KB4021923)Windows
Windows TDX Elevation of Privilege Vulnerability for Windows Server 2008 (KB4021923)Windows
Windows Search Remote Code Execution Vulnerability for Windows Vista for x64-based Systems (KB4024402)Windows
Windows Search Remote Code Execution Vulnerability for x64-based Systems (KB4024402)Windows
Windows Search Remote Code Execution Vulnerability for Windows Vista (KB4024402)Windows
Windows Search Remote Code Execution Vulnerability windows search vulnerabilities in Windows Server 2008 (KB4024402)Windows
Windows Search Remote Code Execution Vulnerability for Windows Server 2003 for x64-based Systems (KB4024402)Windows
Windows Search Remote Code Execution Vulnerability for Windows XP SP2 for x64-based Systems (KB4024402)Windows
Windows Search Remote Code Execution Vulnerability for Windows Server 2003 (KB4024402)Windows
Windows Search Remote Code Execution Vulnerability for Windows XP SP3 (KB4024402)Windows
Windows Remote Code Execution Vulnerability for Windows Server 2008 for x64-based Systems (KB4022008)Windows
Windows Remote Code Execution Vulnerability for Windows Server 2008 (KB4022008)Windows
LNK Remote Code Execution Vulnerability for Windows Vista (KB4021903)Windows
LNK Remote Code Execution Vulnerability for Windows Server 2008 (KB4021903)Windows
LNK Remote Code Execution Vulnerability for Windows Vista for x64-based Systems (KB4021903)Windows
LNK Remote Code Execution Vulnerability for Windows Server 2008 for x64-based Systems (KB4021903)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-22577Security Update for Windows Server 2008 for x64-based Systems (KB4022887)
PATCH-22576Security Update for Windows Server 2008 (KB4022887)
PATCH-22557Security Update for Windows Server 2008 for x64-based Systems (KB4022884)
PATCH-22556Security Update for Windows Server 2008 (KB4022884)
PATCH-22573Security Update for Windows Server 2008 for x64-based Systems (KB4022013)
PATCH-22572Security Update for Windows Server 2008 (KB4022013)
PATCH-22543Cumulative Security Update for Internet Explorer 10 for Windows Server 2012 (KB4021558)
PATCH-22547Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 (KB4021558)
PATCH-22541Cumulative Security Update for Internet Explorer 11 for Windows 8.1 (KB4021558)
PATCH-22546Cumulative Security Update for Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems (KB4021558)
PATCH-22540Cumulative Security Update for Internet Explorer 11 for Windows 7 (KB4021558)
PATCH-22542Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 for x64-based Systems (KB4021558)
PATCH-22539Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 (KB4021558)
PATCH-22575Security Update for Windows Server 2008 for x64-based Systems (KB4022883)
PATCH-22574Security Update for Windows Server 2008 (KB4022883)
PATCH-22592Security Update for Windows Server 2008 for x64-based Systems (KB3217845)
PATCH-22567Security Update for Windows Server 2008 for x64-based Systems (KB4018106)
PATCH-22566Security Update for Windows Server 2008 (KB4018106)
PATCH-22571Security Update for Windows Server 2008 for x64-based Systems (KB4022010)
PATCH-22570Security Update for Windows Server 2008 (KB4022010)
PATCH-22569Security Update for Windows Server 2008 for x64-based Systems (KB4021923)
PATCH-22568Security Update for Windows Server 2008 (KB4021923)
PATCH-22564Security Update for Windows Vista for x64-based Systems (KB4024402)
PATCH-22565Security Update for Windows Server 2008 for x64-based Systems (KB4024402)
PATCH-22560Security Update for Windows Vista (KB4024402)
PATCH-22561Security Update for Windows Server 2008 (KB4024402)
PATCH-22563Security Update for Windows Server 2003 for x64-based Systems (KB4024402)
PATCH-22562Security Update for Windows XP SP2 for x64-based Systems (KB4024402)
PATCH-22559Security Update for Windows Server 2003 (KB4024402)
PATCH-22558Security Update for Windows XP SP3 (KB4024402)
PATCH-22555Security Update for Windows Server 2008 for x64-based Systems (KB4022008)
PATCH-22554Security Update for Windows Server 2008 (KB4022008)
PATCH-22550Security Update for Windows Vista (KB4021903)
PATCH-22551Security Update for Windows Server 2008 (KB4021903)
PATCH-22552Security Update for Windows Vista for x64-based Systems (KB4021903)
PATCH-22553Security Update for Windows Server 2008 for x64-based Systems (KB4021903)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234