Graphics in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka Microsoft Graphics Component Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2017-8573 and CVE-2017-8556.
Weakness
The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Windows_10 | Microsoft | 1607 (including) | 1607 (including) |
| Windows_10 | Microsoft | 1703 (including) | 1703 (including) |
| Windows_server_2016 | Microsoft | * | * |
References
- http://www.securityfocus.com/bid/99438
- http://www.securitytracker.com/id/1038856
- https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8574
- http://www.securityfocus.com/bid/99438
- http://www.securitytracker.com/id/1038856
- https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8574