CVE-2017-11788
HighSummary
The vulnerability in Windows Search allows an unauthenticated attacker to remotely send specially crafted messages that could lead to a denial of service due to improper handling of objects in memory.
Risk Assessment
An attacker could exploit this vulnerability to disrupt system operations, potentially causing downtime for the organization.
Recommendation
It is recommended to update operating systems to the latest versions and monitor network traffic for potential attack attempts.
Other vulnerabilities in Windows Search
See all- CVE-2017-8620High
The vulnerability in Windows Search allows for remote code execution in various versions of Windows, including Windows Server 2008, Windows 7, Windows 8.1, Windows 10, and Windows Server 2016. The issue arises from improper handling of objects in memory.
- CVE-2023-36884HighActively exploited
A vulnerability in Windows Search allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
- CVE-2017-8589Critical
A vulnerability in Windows allows remote code execution due to improper handling of objects in memory by Windows Search. This affects multiple versions of Windows operating systems, including Windows 7, 8.1, and Windows 10.
Original NVD description (English source)
Windows Search in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows server, version 1709 allows an unauthenticated attacker to remotely send specially crafted messages that could cause a denial of service against the system due to improperly handing objects in memory, aka "Windows Search Denial of Service Vulnerability".