A DCOM object in Helppane.exe in Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows HelpPane Elevation of Privilege Vulnerability."
Product | CPU Architecture | Version | Update | Tested |
---|---|---|---|---|
Windows 7 | ||||
Windows 7 | x86/x64 | SP1 | ||
Windows Rt | ||||
Windows 8.1 | x86/x64 | |||
Windows 10 | x86/x64 | |||
Windows Server 2008 | x86/x64 | R2 | SP1 | |
Windows Server 2012 | R2 | |||
Windows Server 2012 | ||||
Windows Server 2016 |
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0100
The vulnerability does not test, the root directory is stored in the network collection [CVE number] .zip EXP or POC, code status unknown