Windows Uniscribe Information Disclosure Vulnerability for Windows 7 - WannaCrypt Ransomware Worm(KB4012212)

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
94.318%

CVE Information

Patch Details

Patch associated with this vulnerability is supported by ManageEngine.

Patch ID
22062

Patch Description
March, 2017 Security Only Quality Update for Windows 7 - WannaCrypt Ransomware Worm(KB4012212)

References

http://blog.inspired-sec.com/archive/2017/03/17/COM-Moniker-Privesc.html
http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DVD-MAKER-XML-EXTERNAL-ENTITY-FILE-DISCLOSURE.txt
http://pastebin.com/raw/Eztknq4s
http://www.securityfocus.com/bid/96013
http://www.securityfocus.com/bid/96018
http://www.securityfocus.com/bid/96020
http://www.securityfocus.com/bid/96023
http://www.securityfocus.com/bid/96024
http://www.securityfocus.com/bid/96025
http://www.securityfocus.com/bid/96026
http://www.securityfocus.com/bid/96029
http://www.securityfocus.com/bid/96032
http://www.securityfocus.com/bid/96033
http://www.securityfocus.com/bid/96034
http://www.securityfocus.com/bid/96057
http://www.securityfocus.com/bid/96069
http://www.securityfocus.com/bid/96098
http://www.securityfocus.com/bid/96103
http://www.securityfocus.com/bid/96599
http://www.securityfocus.com/bid/96603
http://www.securityfocus.com/bid/96604
http://www.securityfocus.com/bid/96605
http://www.securityfocus.com/bid/96606
http://www.securityfocus.com/bid/96607
http://www.securityfocus.com/bid/96608
http://www.securityfocus.com/bid/96610
http://www.securityfocus.com/bid/96622
http://www.securityfocus.com/bid/96623
http://www.securityfocus.com/bid/96625
http://www.securityfocus.com/bid/96626
http://www.securityfocus.com/bid/96627
http://www.securityfocus.com/bid/96628
http://www.securityfocus.com/bid/96630
http://www.securityfocus.com/bid/96631
http://www.securityfocus.com/bid/96632
http://www.securityfocus.com/bid/96633
http://www.securityfocus.com/bid/96634
http://www.securityfocus.com/bid/96635
http://www.securityfocus.com/bid/96636
http://www.securityfocus.com/bid/96637
http://www.securityfocus.com/bid/96638
http://www.securityfocus.com/bid/96639
http://www.securityfocus.com/bid/96640
http://www.securityfocus.com/bid/96641
http://www.securityfocus.com/bid/96642
http://www.securityfocus.com/bid/96643
http://www.securityfocus.com/bid/96644
http://www.securityfocus.com/bid/96652
http://www.securityfocus.com/bid/96657
http://www.securityfocus.com/bid/96658
http://www.securityfocus.com/bid/96659
http://www.securityfocus.com/bid/96660
http://www.securityfocus.com/bid/96661
http://www.securityfocus.com/bid/96663
http://www.securityfocus.com/bid/96665
http://www.securityfocus.com/bid/96666
http://www.securityfocus.com/bid/96667
http://www.securityfocus.com/bid/96668
http://www.securityfocus.com/bid/96669
http://www.securityfocus.com/bid/96675
http://www.securityfocus.com/bid/96676
http://www.securityfocus.com/bid/96678
http://www.securityfocus.com/bid/96679
http://www.securityfocus.com/bid/96680
http://www.securityfocus.com/bid/96695
http://www.securityfocus.com/bid/96697
http://www.securityfocus.com/bid/96698
http://www.securityfocus.com/bid/96699
http://www.securityfocus.com/bid/96700
http://www.securityfocus.com/bid/96701
http://www.securityfocus.com/bid/96703
http://www.securityfocus.com/bid/96704
http://www.securityfocus.com/bid/96705
http://www.securityfocus.com/bid/96706
http://www.securityfocus.com/bid/96707
http://www.securityfocus.com/bid/96709
http://www.securityfocus.com/bid/96713
http://www.securityfocus.com/bid/96715
http://www.securityfocus.com/bid/96722
http://www.securitytracker.com/id/1037845
http://www.securitytracker.com/id/1037991
http://www.securitytracker.com/id/1037992
http://www.securitytracker.com/id/1037999
http://www.securitytracker.com/id/1038001
http://www.securitytracker.com/id/1038002
http://www.securitytracker.com/id/1038012
http://www.securitytracker.com/id/1038013
http://www.securitytracker.com/id/1038014
http://www.securitytracker.com/id/1038015
http://www.securitytracker.com/id/1038016
http://www.securitytracker.com/id/1038017
http://www.securitytracker.com/id/1038018
https://0patch.blogspot.com/2017/02/0patching-0-day-windows-gdi32dll-memory.html
https://0patch.blogspot.com/2017/09/exploit-kit-rendezvous-and-cve-2017-0022.html
https://blogs.technet.microsoft.com/mmpc/2017/03/27/detecting-and-mitigating-elevation-of-privilege-exploit-for-cve-2017-0005/
https://bugs.chromium.org/p/project-zero/issues/detail?id=1021
https://bugs.chromium.org/p/project-zero/issues/detail?id=992
https://enigma0x3.net/2017/04/03/defeating-device-guard-a-look-into-cve-2017-0007/
https://github.com/k0keoyo/CVE-2017-0038-EXP-C-JS
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0001
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0005
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0007
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0014
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0021
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0022
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0024
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0025
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0026
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0038
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0039
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0042
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0043
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0045
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0047
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0050
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0051
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0055
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0056
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0057
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0060
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0061
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0062
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0063
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0072
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0073
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0074
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0075
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0076
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0078
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0079
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0080
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0081
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0082
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0083
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0084
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0085
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0086
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0087
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0088
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0089
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0090
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0091
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0092
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0095
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0096
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0097
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0098
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0099
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0100
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0101
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0102
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0103
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0104
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0108
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0109
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0111
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0112
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0113
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0114
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0115
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0116
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0117
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0118
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0119
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0120
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0121
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0122
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0123
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0128
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0130
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0143
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0144
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0145
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0146
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0147
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0148
https://twitter.com/Qab/status/842506404950917120
https://www.exploit-db.com/exploits/41363/
https://www.exploit-db.com/exploits/41607/
https://www.exploit-db.com/exploits/41619/
https://www.exploit-db.com/exploits/41645/
https://www.exploit-db.com/exploits/41646/
https://www.exploit-db.com/exploits/41647/
https://www.exploit-db.com/exploits/41648/
https://www.exploit-db.com/exploits/41649/
https://www.exploit-db.com/exploits/41650/
https://www.exploit-db.com/exploits/41651/
https://www.exploit-db.com/exploits/41652/
https://www.exploit-db.com/exploits/41653/
https://www.exploit-db.com/exploits/41654/
https://www.exploit-db.com/exploits/41655/
https://www.exploit-db.com/exploits/41656/
https://www.exploit-db.com/exploits/41657/
https://www.exploit-db.com/exploits/41658/
https://www.exploit-db.com/exploits/41659/
https://www.exploit-db.com/exploits/41891/
https://www.exploit-db.com/exploits/41987/
https://www.exploit-db.com/exploits/42030/
https://www.exploit-db.com/exploits/42031/
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0126
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0124
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0127
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0125