CVE-2017-0047

High

Published: 17/03/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A vulnerability in the GDI interface of Windows allows local users to gain elevated privileges through a crafted application. This affects multiple versions of Windows, including Vista, 7, 8.1, and 10.

Risk Assessment

The risk involves unauthorized users potentially gaining higher privileges, which could lead to unauthorized access to the system and data.

Recommendation

It is recommended to update operating systems to the latest versions and apply relevant security patches to minimize risk.

Other vulnerabilities in Graphics Device Interface (GDI)

CVE-2016-3356High
The GDI in Microsoft Windows 10 1607 allows remote attackers to execute arbitrary code via a crafted document.

Original NVD description (English source)

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "Windows GDI Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0001, CVE-2017-0005 and CVE-2017-0025.