Windows Uniscribe Information Disclosure Vulnerability for Windows Server 2008 R2 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012212)

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
94.318%

CVE Information

Patch Details

Patch associated with this vulnerability is supported by ManageEngine.

Patch ID
22064

Patch Description
March, 2017 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012212)

References

http://blog.inspired-sec.com/archive/2017/03/17/COM-Moniker-Privesc.html
http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DVD-MAKER-XML-EXTERNAL-ENTITY-FILE-DISCLOSURE.txt
http://pastebin.com/raw/Eztknq4s
http://www.securityfocus.com/bid/96013
http://www.securityfocus.com/bid/96018
http://www.securityfocus.com/bid/96020
http://www.securityfocus.com/bid/96023
http://www.securityfocus.com/bid/96024
http://www.securityfocus.com/bid/96025
http://www.securityfocus.com/bid/96026
http://www.securityfocus.com/bid/96029
http://www.securityfocus.com/bid/96032
http://www.securityfocus.com/bid/96033
http://www.securityfocus.com/bid/96034
http://www.securityfocus.com/bid/96057
http://www.securityfocus.com/bid/96069
http://www.securityfocus.com/bid/96098
http://www.securityfocus.com/bid/96103
http://www.securityfocus.com/bid/96599
http://www.securityfocus.com/bid/96603
http://www.securityfocus.com/bid/96604
http://www.securityfocus.com/bid/96605
http://www.securityfocus.com/bid/96606
http://www.securityfocus.com/bid/96607
http://www.securityfocus.com/bid/96608
http://www.securityfocus.com/bid/96610
http://www.securityfocus.com/bid/96622
http://www.securityfocus.com/bid/96623
http://www.securityfocus.com/bid/96625
http://www.securityfocus.com/bid/96626
http://www.securityfocus.com/bid/96627
http://www.securityfocus.com/bid/96628
http://www.securityfocus.com/bid/96630
http://www.securityfocus.com/bid/96631
http://www.securityfocus.com/bid/96632
http://www.securityfocus.com/bid/96633
http://www.securityfocus.com/bid/96634
http://www.securityfocus.com/bid/96635
http://www.securityfocus.com/bid/96636
http://www.securityfocus.com/bid/96637
http://www.securityfocus.com/bid/96638
http://www.securityfocus.com/bid/96639
http://www.securityfocus.com/bid/96640
http://www.securityfocus.com/bid/96641
http://www.securityfocus.com/bid/96642
http://www.securityfocus.com/bid/96643
http://www.securityfocus.com/bid/96644
http://www.securityfocus.com/bid/96652
http://www.securityfocus.com/bid/96657
http://www.securityfocus.com/bid/96658
http://www.securityfocus.com/bid/96659
http://www.securityfocus.com/bid/96660
http://www.securityfocus.com/bid/96661
http://www.securityfocus.com/bid/96663
http://www.securityfocus.com/bid/96665
http://www.securityfocus.com/bid/96666
http://www.securityfocus.com/bid/96667
http://www.securityfocus.com/bid/96668
http://www.securityfocus.com/bid/96669
http://www.securityfocus.com/bid/96675
http://www.securityfocus.com/bid/96676
http://www.securityfocus.com/bid/96678
http://www.securityfocus.com/bid/96679
http://www.securityfocus.com/bid/96680
http://www.securityfocus.com/bid/96695
http://www.securityfocus.com/bid/96697
http://www.securityfocus.com/bid/96698
http://www.securityfocus.com/bid/96699
http://www.securityfocus.com/bid/96700
http://www.securityfocus.com/bid/96701
http://www.securityfocus.com/bid/96703
http://www.securityfocus.com/bid/96704
http://www.securityfocus.com/bid/96705
http://www.securityfocus.com/bid/96706
http://www.securityfocus.com/bid/96707
http://www.securityfocus.com/bid/96709
http://www.securityfocus.com/bid/96713
http://www.securityfocus.com/bid/96715
http://www.securityfocus.com/bid/96722
http://www.securitytracker.com/id/1037845
http://www.securitytracker.com/id/1037991
http://www.securitytracker.com/id/1037992
http://www.securitytracker.com/id/1037999
http://www.securitytracker.com/id/1038001
http://www.securitytracker.com/id/1038002
http://www.securitytracker.com/id/1038012
http://www.securitytracker.com/id/1038013
http://www.securitytracker.com/id/1038014
http://www.securitytracker.com/id/1038015
http://www.securitytracker.com/id/1038016
http://www.securitytracker.com/id/1038017
http://www.securitytracker.com/id/1038018
https://0patch.blogspot.com/2017/02/0patching-0-day-windows-gdi32dll-memory.html
https://0patch.blogspot.com/2017/09/exploit-kit-rendezvous-and-cve-2017-0022.html
https://blogs.technet.microsoft.com/mmpc/2017/03/27/detecting-and-mitigating-elevation-of-privilege-exploit-for-cve-2017-0005/
https://bugs.chromium.org/p/project-zero/issues/detail?id=1021
https://bugs.chromium.org/p/project-zero/issues/detail?id=992
https://enigma0x3.net/2017/04/03/defeating-device-guard-a-look-into-cve-2017-0007/
https://github.com/k0keoyo/CVE-2017-0038-EXP-C-JS
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0001
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0005
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0007
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0014
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0021
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0022
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0024
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0025
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0026
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0038
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0039
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0042
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0043
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0045
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0047
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0050
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0051
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0055
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0056
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0057
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0060
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0061
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0062
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0063
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0072
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0073
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0074
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0075
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0076
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0078
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0079
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0080
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0081
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0082
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0083
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0084
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0085
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0086
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0087
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0088
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0089
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0090
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0091
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0092
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0095
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0096
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0097
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0098
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0099
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0100
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0101
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0102
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0103
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0104
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0108
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0109
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0111
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0112
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0113
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0114
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0115
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0116
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0117
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0118
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0119
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0120
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0121
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0122
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0123
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0128
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0130
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0143
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0144
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0145
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0146
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0147
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0148
https://twitter.com/Qab/status/842506404950917120
https://www.exploit-db.com/exploits/41363/
https://www.exploit-db.com/exploits/41607/
https://www.exploit-db.com/exploits/41619/
https://www.exploit-db.com/exploits/41645/
https://www.exploit-db.com/exploits/41646/
https://www.exploit-db.com/exploits/41647/
https://www.exploit-db.com/exploits/41648/
https://www.exploit-db.com/exploits/41649/
https://www.exploit-db.com/exploits/41650/
https://www.exploit-db.com/exploits/41651/
https://www.exploit-db.com/exploits/41652/
https://www.exploit-db.com/exploits/41653/
https://www.exploit-db.com/exploits/41654/
https://www.exploit-db.com/exploits/41655/
https://www.exploit-db.com/exploits/41656/
https://www.exploit-db.com/exploits/41657/
https://www.exploit-db.com/exploits/41658/
https://www.exploit-db.com/exploits/41659/
https://www.exploit-db.com/exploits/41891/
https://www.exploit-db.com/exploits/41987/
https://www.exploit-db.com/exploits/42030/
https://www.exploit-db.com/exploits/42031/
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0126
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0124
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0127
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0125