CVE-2017-0176

CVE-2017-0176 describes a buffer overflow in the Smart Card authentication code (gpkcsp.dll) affecting Microsoft Windows XP and Server 2003. This vulnerability carries a high CVSS score of 8.1, indicating that a remote attacker can achieve arbitrary code execution without user interaction, provided the target is a domain-joined machine with RDP enabled, though the attack complexity is high. While there is no public exploit code available (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, including its association with botnets like Smominru. Despite the lack of readily available exploits, its high FAUCET Risk Score of 97/100 and high EPSS score suggest a notable potential for future exploitation.