CVE-2017-11852 PUBLISHED CVSS 1.899999976158142 LOW

Microsoft GDI Component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to log on to an affected system and run a specially crafted application to compromise the user's system, due improperly disclosing kernel memory addresses, aka "Windows GDI Information Disclosure Vulnerability".

EPSS 4.12% · 88.5th percentile

Risk Scores

CVSS v2.0
1.899999976158142
EPSS Score
4.12%
88.5th percentile

Affected Products

VendorProductVersions
Microsoft CorporationGDIWindows 7 SP1 and Windows Server 2008 SP2 and R2 SP1.
microsoftwindows_7
microsoftwindows_server_2008r2

Timeline

References

Open in Interactive Console →