HTTP: Microsoft Windows Server Graphics Information Disclosure

This signature detects attempts to exploit a known vulnerability against Microsoft Windows Server. A successful attack can lead to sensitive information disclosure.

Extended Description

Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka "Windows Graphics Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0286, CVE-2017-0287, CVE-2017-0288, CVE-2017-8531, CVE-2017-8532, and CVE-2017-8533.

Affected Products

Microsoft office

Short Name
HTTP:STC:DL:WIN-SERVER-GRAPH-ID
Severity
Minor
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
CVE-2017-0282 CVE-2017-0283 CVE-2017-0284 CVE-2017-0285 CVE-2017-0286 CVE-2017-0287 CVE-2017-0288 CVE-2017-0289 Disclosure Graphics Information Microsoft Server Windows bid:98885 bid:98891 bid:98914 bid:98918 bid:98920 bid:98922 bid:98923 bid:98929
Release Date
05/07/2020
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3590
False Positive
Unknown
Vendors

Microsoft

CVSS Score

9.3

1.9

Found a potential security threat?