CVE-2017-0039
HighSummary
A vulnerability in Microsoft Windows Vista SP2 and Server 2008 SP2 related to improper dynamic link library (DLL) loading allows local users to gain privileges via a crafted application.
Risk Assessment
Exploitation of this vulnerability may lead to privilege escalation by local users, posing a significant security threat to the system.
Recommendation
It is recommended to update systems to the latest versions and implement appropriate security measures to minimize the risk of exploitation of this vulnerability.
Other vulnerabilities in Microsoft Windows Vista SP2, Microsoft Windows Server 2008 SP2
See all- CVE-2016-0100High
A vulnerability in Microsoft Windows Vista SP2 and Server 2008 SP2 related to improper library loading, allowing local users to gain privileges via a crafted application.
- CVE-2015-2474High
The vulnerability in Microsoft Windows Vista SP2 and Server 2008 SP2 allows remote authenticated users to execute arbitrary code via a crafted string in a Server Message Block (SMB) server error-logging action.
Original NVD description (English source)
Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle dynamic link library (DLL) loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."