{"schemaVersion":3,"id":"CVE-2017-0118","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128.","dates":{"published":"2017-03-17T00:00:00.000Z","modified":"2024-08-05T12:55:18.957Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.3,"severity":"medium","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":4.3,"severity":"medium","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.22951,"percentile":0.97732,"severity":"high","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.22951},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.24604,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.22951,"percentile":0.97732}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.24604,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.22951,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.22951,"percentile":0.97732}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"41655","name":"Microsoft Windows - Uniscribe Font Processing Multiple Heap Out-of-Bounds and Wild Reads (MS17-011)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/41655","maturity":"poc","reliabilityScore":0.8,"verified":true,"type":"dos","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"dos","platform":"windows","file":"exploits/windows/dos/41655.txt","codes":["CVE-2017-0128","CVE-2017-0127","CVE-2017-0126","CVE-2017-0125","CVE-2017-0124","CVE-2017-0123","CVE-2017-0122","CVE-2017-0121","CVE-2017-0120","CVE-2017-0119","CVE-2017-0118","CVE-2017-0117","CVE-2017-0116","CVE-2017-0115","CVE-2017-0114","CVE-2017-0113","CVE-2017-0112","CVE-2017-0111","CVE-2017-0092","CVE-2017-0091","CVE-2017-0083","MS17-011"]},"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/200.html"}],"affected":[{"vendor":"microsoft corporation","product":"windows uniscribe","name":"Windows Uniscribe","label":"windows uniscribe","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016","noFixRecorded":false,"fixedIn":null}],"versionsText":"Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016","eol":null,"hubHref":"/vendor/microsoft_corporation/windows_uniscribe"},{"vendor":"microsoft","product":"windows_10","name":"windows 10","label":"windows_10","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"1511","noFixRecorded":false,"fixedIn":null},{"text":"1607","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | 1511 | 1607","eol":null,"hubHref":"/vendor/microsoft/windows_10"},{"vendor":"microsoft","product":"windows_server_2008","name":"windows server 2008","label":"windows_server_2008","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"r2:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"r2:sp1","eol":null,"hubHref":"/vendor/microsoft/windows_server_2008"},{"vendor":"microsoft","product":"windows_server_2012","name":"windows server 2012","label":"windows_server_2012","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | r2","eol":null,"hubHref":"/vendor/microsoft/windows_server_2012"}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0118","label":"portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0118","hostname":"portal.msrc.microsoft.com","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/96680","label":"www.securityfocus.com/bid/96680","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1037992","label":"www.securitytracker.com/id/1037992","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"https://www.exploit-db.com/exploits/41655/","label":"www.exploit-db.com/exploits/41655/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2017-03-17T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T12:55:18.957Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":32,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T07:20:55.740Z","stale":false,"partial":false}}