Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8684 and CVE-2017-8688.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Msft | — | Security Update for Windows Server 2008 (KB4039384)2017-09 Security Only Quality Update for Windows 7 for x86-based Systems (KB4038779)Security Update for WES09 and POSReady 2009 (KB4039384)2017-09 Security Only Quality Update for Windows Server 2008 R2 for Itanium-based Systems (KB4038779)2017-09 Security Only Quality Update for Windows Embedded Standard 7 for x64-based Systems (KB4038779)Security Update for Windows Server 2008 for Itanium-based Systems (KB4039384)Security Update for Windows Server 2008 for x64-based Systems (KB4039384)2017-09 Security Only Quality Update for Windows Embedded Standard 7 for x86-based Systems (KB4038779)2017-09 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB4038779)2017-09 Security Only Quality Update for Windows 7 for x64-based Systems (KB4038779) | Sep 12, 2017 | Sep 12, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub