CVE-2017-0073

CVE-2017-0073 is an information disclosure vulnerability in the Graphics Device Interface (GDI) of various Microsoft Windows versions, including Vista, Server 2008, Windows 7, 8.1, Server 2012, RT 8.1, and Windows 10. This medium-severity flaw (CVSS 4.3) allows remote attackers to obtain sensitive information from process memory by tricking a user into visiting a crafted website. While the attack complexity is low, it requires user interaction and only impacts confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.