What is CVE-2017-0103?

CVE-2017-0103 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Windows Registry Elevation of Privilege Vulnerability

Which CVE IDs does CVE-2017-0103 cover?

CVE-2017-0103 covers the following CVE IDs: CVE-2017-0103. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2017-0103?

CVE-2017-0103 has a CVSS v3 base score of 6.3, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2017-0103?

CVE-2017-0103 affects 14 products, including: Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation); and others — see the full list on the advisory page.

CVE-2017-0103HighCVSS 6.3

Windows Registry Elevation of Privilege Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

March 14, 2017

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2017-0103 →

📋 Description

An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. A locally authenticated attacker could exploit this vulnerability by running a specially crafted application. The security update addresses the vulnerability by helping to ensure that the Windows Kernel API properly handles objects in memory.

🎯 Affected products14

Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2

✅ Remediation

KB4012215 (Monthly Rollup) KB4012212 (Security Only) KB4011981 (Security Update) KB4012217 (Monthly Rollup) KB4012214 (Security Only)

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products14

✅ Remediation

🔗 References (11)