CVE-2017-0292
HighSummary
A vulnerability in Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file.
Risk Assessment
An attacker could exploit this vulnerability to remotely execute malicious code on the victim's system, potentially leading to data loss or system takeover.
Recommendation
It is recommended to update operating systems to the latest versions and to avoid opening unknown or suspicious PDF files.
Other vulnerabilities in Windows PDF
See all- CVE-2017-8460High
A vulnerability in Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016 allows information disclosure when a user opens a specially crafted PDF file.
- CVE-2017-0291High
The vulnerability in Windows PDF allows remote code execution when a user opens a specially crafted PDF file. It affects Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016.
Original NVD description (English source)
Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file, aka "Windows PDF Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0291.