CVE-2017-0287 is an information disclosure vulnerability in the Graphics component of various Windows operating systems, including Windows 7, 8.1, 10, and Server versions. This flaw allows for the improper disclosure of memory contents. The vulnerability has a CVSS score of 5.0 (Medium), indicating that an attacker with local user privileges could exploit it, potentially requiring user interaction, to achieve high confidentiality impact by revealing sensitive memory data. While there is no evidence of active exploitation or Metasploit modules, an ExploitDB entry exists detailing an out-of-bounds memory read in Uniscribe font processing. Community and media attention for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2007CPE matchmatch criteria | cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:* | ||
2010CPE matchmatch criteria | cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* | ||
1511CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:* | ||
1607CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.