CVE-2017-0291

High

Published: 15/06/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The vulnerability in Windows PDF allows remote code execution when a user opens a specially crafted PDF file. It affects Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016.

Risk Assessment

Remote code execution can lead to system takeover, posing a serious security threat to the organization.

Recommendation

It is recommended to update systems to the latest versions and to avoid opening suspicious PDF files.

Other vulnerabilities in Windows PDF

See all

CVE-2017-8460High
A vulnerability in Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016 allows information disclosure when a user opens a specially crafted PDF file.
CVE-2017-0292High
A vulnerability in Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file.

Original NVD description (English source)

Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file, aka "Windows PDF Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0292.