CVE-2017-0294
HighSummary
A vulnerability in Microsoft Windows allows an attacker to execute remote code when the system fails to properly handle cabinet files. This affects multiple versions of Windows, including Windows 7, 8.1, 10, and Windows Server.
Risk Assessment
Exploitation of this vulnerability could lead to an attacker gaining control over the system, posing a serious threat to the security of organizational data and infrastructure.
Recommendation
It is recommended to update operating systems to the latest versions that include security patches addressing this vulnerability.
Other vulnerabilities in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016
See all- CVE-2017-8563High
A vulnerability in Microsoft Windows allows for elevation of privilege due to Kerberos falling back to NT LAN Manager (NTLM) Authentication Protocol as the default authentication protocol.
- CVE-2017-8495High
A vulnerability in Windows systems allows an attacker to bypass Extended Protection for Authentication when Kerberos fails to prevent tampering with the SNAME field during ticket exchange. This is known as 'Kerberos SNAME Security Feature Bypass'.
Original NVD description (English source)
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute remote code when Windows fails to properly handle cabinet files, aka "Windows Remote Code Execution Vulnerability".