2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2017-0192" ,
"sourceIdentifier" : "secure@microsoft.com" ,
"published" : "2017-04-12T14:59:01.030" ,
"lastModified" : "2017-07-11T01:33:25.533" ,
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "The Adobe Type Manager Font Driver (ATMFD.dll) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold , 1511, 1607, and 1703 allows an attacker to gain sensitive information via a specially crafted document or an untrusted website, aka \"ATMFD.dll Information Disclosure Vulnerability.\""
} ,
{
"lang" : "es" ,
"value" : "Adobe Type Manager Font Driver (ATMFD.dll) en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; y Windows 10 Gold, 1511, 1607 y 1703 permite a un atacante obtener informaci\u00f3n sensible a trav\u00e9s de un documento especialmente manipulado o un sitio web no confiable, vulnerabilidad tambi\u00e9n conocida como \"Vulnerabilidad de divulgaci\u00f3n de informaci\u00f3n ATMFD.dll\"."
}
] ,
"metrics" : {
"cvssMetricV30" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.0" ,
"vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "REQUIRED" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "LOW" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 4.3 ,
"baseSeverity" : "MEDIUM"
} ,
"exploitabilityScore" : 2.8 ,
"impactScore" : 1.4
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N" ,
"accessVector" : "NETWORK" ,
"accessComplexity" : "MEDIUM" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 4.3
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 8.6 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : true
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-200"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*" ,
"matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*" ,
"matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*" ,
"matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" ,
"matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://www.securityfocus.com/bid/97452" ,
"source" : "secure@microsoft.com" ,
"tags" : [
"Third Party Advisory" ,
"VDB Entry"
]
} ,
{
"url" : "http://www.securitytracker.com/id/1038231" ,
"source" : "secure@microsoft.com"
} ,
{
"url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0192" ,
"source" : "secure@microsoft.com" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
}
]
}
