CVE-2017-0014
HighSummary
The Windows Graphics Component in Microsoft Office 2010 SP2 and various versions of Windows allows remote attackers to execute arbitrary code via a crafted website. This is a remote code execution vulnerability that is different from that described in CVE-2017-0108.
Risk Assessment
Attackers can exploit this vulnerability to gain control over the system, potentially leading to data loss or system compromise. Organizations should be aware of the risks associated with opening unknown or suspicious websites.
Recommendation
It is recommended to update systems to the latest versions and implement security measures such as antivirus software and firewalls to minimize the risk of attack.
Other vulnerabilities in Windows Graphics Component
See all- CVE-2024-38250High
A vulnerability in the Windows Graphics Component allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges in the system.
- CVE-2024-38249High
Vulnerability in Windows Graphics Component allows elevation of privilege. An attacker could exploit it to gain higher privileges.
- CVE-2024-38247High
An elevation of privilege vulnerability in the Windows Graphics Component allows an attacker to gain higher privileges.
- CVE-2023-21822High
An elevation of privilege vulnerability exists in the Windows Graphics Component. The description lacks technical details, but the vulnerability could allow an attacker to gain elevated privileges on the system.
- CVE-2023-21804High
Elevation of privilege vulnerability in Windows Graphics Component. Could be exploited to gain elevated privileges.
- CVE-2022-41052High
Remote Code Execution vulnerability in Windows Graphics Component. Allows an attacker to execute code in the context of the current user.
- CVE-2021-34533High
Remote code execution vulnerability in Windows Graphics Component during font parsing. An attacker could exploit it to execute code.
- CVE-2021-34530High
Remote code execution vulnerability in the Windows Graphics Component. An attacker could exploit this flaw to execute arbitrary code in the context of the logged-on user.
- CVE-2021-26868High
Elevation of privilege vulnerability in the Windows Graphics Component. Allows an attacker to gain elevated privileges on the system.
- CVE-2021-26861High
Remote code execution vulnerability in the Windows Graphics Component. An attacker could exploit it to run arbitrary code on the affected system.
Original NVD description (English source)
The Windows Graphics Component in Microsoft Office 2010 SP2; Windows Server 2008 R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Graphics Component Remote Code Execution Vulnerability." This vulnerability is different from that described in CVE-2017-0108.