CVE-2017-0292

Summary

Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file, aka "Windows PDF Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0291.

Impact & exploitability

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products we track (2)

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Official patch: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0292 ↗

Additional information

• NVD record
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0292Patch
• http://www.securityfocus.com/bid/98836Advisory
• http://www.securitytracker.com/id/1038678