CVE-2017-8685

Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows information disclosure by the way it discloses kernel memory addresses…

published September 13, 2017

CVSS
—
EPSS
3%
Percentile
87.4
In the wild
Unconfirmed
What it is

Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8684 and CVE-2017-8688.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03044 · 87.4th percentile
Published
2017-09-13T01:00Z
EPSS history
Timeline
  • 13 SEP 01:00Z
    Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows information disclosure by the way it discloses kernel memory addresses…
    cvelistv5