The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "GDI+ Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0060 and CVE-2017-0062.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Microsoft Office | — | Download and install Microsoft KB3178656 | Jun 20, 2023 | Mar 17, 2017 |
| Msft | — | March, 2017 Security Only Quality Update for Windows Embedded Standard 7 (KB4012212)March, 2017 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB4012212)Security Update for Skype for Business 2015 (KB3172539) 32-Bit EditionSecurity Update for Windows 8 for x64-based Systems (KB4012583)Security Update for Windows XP for x64-based Systems (KB4012583)Security Update for Windows Server 2008 (KB4012583)March, 2017 Security Only Quality Update for Windows 7 for x64-based Systems (KB4012212)Security Update for Windows XP Service Pack 3 (KB4012583)2017-03 Cumulative Update for Microsoft Windows Server 2012 R2 (KB4012213)Security Update for Windows Server 2008 for x64-based Systems (KB4012583)Security Update for Windows Vista for x64-based Systems (KB4012583)Security Update for Microsoft Office 2007 suites (KB3127945)March, 2017 Security Only Quality Update for Windows Embedded 8 Standard (KB4012214)Security Update for Windows Vista (KB4012583)March, 2017 Security Only Quality Update for Windows Server 2008 R2 for Itanium-based Systems (KB4012212)March, 2017 Security Only Quality Update for Windows 8.1 for x64-based Systems (KB4012213)March, 2017 Security Only Quality Update for Windows Embedded Standard 7 for x64-based Systems (KB4012212)March, 2017 Security Only Quality Update for Windows 8.1 (KB4012213)Security Update for Windows XP SP3 for XPe (KB4012583)Security Update for Microsoft Office 2010 (KB3127958) 64-Bit EditionSecurity Update for WES09 and POSReady 2009 (KB4012583)Security Update for Lync 2010 Attendee - Administrator level installation (KB4010301)2017-03 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4013429)Security Update for Skype for Business 2015 (KB3172539) 64-Bit EditionSecurity Update for Lync 2010 X64 (KB4010299)Security Update for Windows Server 2003 (KB4012583)2017-03 Cumulative Update for Microsoft Windows Server 2012 (KB4012214)March, 2017 Security Only Quality Update for Windows Embedded 8 Standard for x64-based Systems (KB4012214)Security Update for Windows Server 2003 for x64-based Systems (KB4012583)Security Update for Windows Server 2008 for Itanium-based Systems (KB4012583)Security Update for Lync 2010 X86 (KB4010299)2017-03 Cumulative Update for Microsoft Windows 10, version 1507 (KB4012606)March, 2017 Security Only Quality Update for Windows 7 (KB4012212)Security Update for Microsoft Office 2010 (KB3127958) 32-Bit EditionSecurity Update for Word Viewer (KB3178693)Security Update for Windows 8 (KB4012583)2017-03 Cumulative Update for Microsoft Windows 10, version 1511 (KB4013198)2017-03 Cumulative Update for Microsoft Windows 10, version 1607 (KB4013429) | Mar 14, 2017 | Mar 14, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub