CVE-2017-0100

High

Published: 17/03/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A DCOM object in Helppane.exe in Microsoft Windows 7 SP1, Windows Server 2008 R2, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application.

Risk Assessment

This vulnerability may allow local users to gain unauthorized elevated privileges, posing a risk to system integrity.

Recommendation

It is recommended to update operating systems to the latest versions and apply relevant security patches to mitigate the risk of exploitation of this vulnerability.

Other vulnerabilities in Helppane.exe

CVE-2017-0298High
A DCOM object in Helppane.exe in Microsoft Windows allows an authenticated attacker to run arbitrary code in another user's session when configured to run as the interactive user.

Original NVD description (English source)

A DCOM object in Helppane.exe in Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows HelpPane Elevation of Privilege Vulnerability."