CVE-2017-0005

CVE-2017-0005

描述

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "Windows GDI Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0001, CVE-2017-0025, and CVE-2017-0047.

影响版本

Product	CPU Architecture	Version	Update	Tested
Windows Vista			SP2
Windows Xp			SP2
Windows Xp			SP3
Windows 7
Windows 7	x86/x64		SP1
Windows Rt
Windows 8.1	x86/x64
Windows 10	x86/x64
Windows 10	x86/x64	1511
Windows 10	x86/x64	1607
Windows Server 2008	x86		SP1
Windows Server 2008	x86/x64		SP2
Windows Server 2012		R2
Windows Server 2012
Windows Server 2016

修复补丁

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0005

利用方式

该漏洞并未进行测试，根目录留存着网络收集**[CVE编号].zip**的EXP或者POC，代码状态未知

项目来源

• sheri31

分析文章

• https://www.anquanke.com/post/id/86669
• https://www.microsoft.com/security/blog/2017/03/27/detecting-and-mitigatingelevation-of-privilege-exploit-for-cve-2017-0005/?source=mmpc