CVE-2017-0298
HighSummary
A DCOM object in Helppane.exe in Microsoft Windows allows an authenticated attacker to run arbitrary code in another user's session when configured to run as the interactive user.
Risk Assessment
This vulnerability can lead to privilege escalation, allowing an attacker to take control of another user's session, posing a serious security threat.
Recommendation
It is recommended to restrict access to the DCOM object and apply appropriate security patches to mitigate the risk.
Other vulnerabilities in Helppane.exe
Original NVD description (English source)
A DCOM object in Helppane.exe in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016, when configured to run as the interactive user, allows an authenticated attacker to run arbitrary code in another user's session, aka "Windows COM Session Elevation of Privilege Vulnerability."