Vulnerability-Lookup

CNVD-2017-37112

Vulnerability from cnvd - Published: 2017-12-14

Title

Microsoft Windows Embedded OpenType字体引擎信息泄露漏洞

Description

Microsoft Windows 7 SP1、Windows Server 2008 SP2和Windows Server 2008 R2 SP1都是美国微软（Microsoft）公司的产品。Microsoft Windows 7 SP1是一套供个人电脑使用的操作系统；Windows Server 2008 SP2是一套服务器操作系统。R2 SP1是它的升级版。Embedded OpenType（EOT）font engine是其中的一个字体引擎组件。 Microsoft Windows中的EOT字体引擎存在信息泄露漏洞。远程攻击者可通过登录系统并打开带有特制字体的文档利用该漏洞读取未公开的数据。

Severity

低

Patch Name

Microsoft Windows Embedded OpenType字体引擎信息泄露漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： http://technet.microsoft.com/security/bulletin/November 2017 Security Updates

Reference

http://technet.microsoft.com/security/bulletin/November 2017 Security Updates http://www.securityfocus.com/bid/101736

Impacted products

Name
['Microsoft Windows Server 2008 R2 SP1', 'Microsoft Windows Server 2008 SP2', 'Microsoft Windows 7 SP1']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "101736"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-11835"
    }
  },
  "description": "Microsoft Windows 7 SP1\u3001Windows Server 2008 SP2\u548cWindows Server 2008 R2 SP1\u90fd\u662f\u7f8e\u56fd\u5fae\u8f6f\uff08Microsoft\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Microsoft Windows 7 SP1\u662f\u4e00\u5957\u4f9b\u4e2a\u4eba\u7535\u8111\u4f7f\u7528\u7684\u64cd\u4f5c\u7cfb\u7edf\uff1bWindows Server 2008 SP2\u662f\u4e00\u5957\u670d\u52a1\u5668\u64cd\u4f5c\u7cfb\u7edf\u3002R2 SP1\u662f\u5b83\u7684\u5347\u7ea7\u7248\u3002Embedded OpenType\uff08EOT\uff09font engine\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u5b57\u4f53\u5f15\u64ce\u7ec4\u4ef6\u3002\r\n\r\nMicrosoft Windows\u4e2d\u7684EOT\u5b57\u4f53\u5f15\u64ce\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u767b\u5f55\u7cfb\u7edf\u5e76\u6253\u5f00\u5e26\u6709\u7279\u5236\u5b57\u4f53\u7684\u6587\u6863\u5229\u7528\u8be5\u6f0f\u6d1e\u8bfb\u53d6\u672a\u516c\u5f00\u7684\u6570\u636e\u3002",
  "discovererName": "Wayne Low (@x9090) of Fortinet\u00e2??s FortiGuard Lab",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttp://technet.microsoft.com/security/bulletin/November 2017 Security Updates",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-37112",
  "openTime": "2017-12-14",
  "patchDescription": "Microsoft Windows 7 SP1\u3001Windows Server 2008 SP2\u548cWindows Server 2008 R2 SP1\u90fd\u662f\u7f8e\u56fd\u5fae\u8f6f\uff08Microsoft\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Microsoft Windows 7 SP1\u662f\u4e00\u5957\u4f9b\u4e2a\u4eba\u7535\u8111\u4f7f\u7528\u7684\u64cd\u4f5c\u7cfb\u7edf\uff1bWindows Server 2008 SP2\u662f\u4e00\u5957\u670d\u52a1\u5668\u64cd\u4f5c\u7cfb\u7edf\u3002R2 SP1\u662f\u5b83\u7684\u5347\u7ea7\u7248\u3002Embedded OpenType\uff08EOT\uff09font engine\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u5b57\u4f53\u5f15\u64ce\u7ec4\u4ef6\u3002\r\n\r\nMicrosoft Windows\u4e2d\u7684EOT\u5b57\u4f53\u5f15\u64ce\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u767b\u5f55\u7cfb\u7edf\u5e76\u6253\u5f00\u5e26\u6709\u7279\u5236\u5b57\u4f53\u7684\u6587\u6863\u5229\u7528\u8be5\u6f0f\u6d1e\u8bfb\u53d6\u672a\u516c\u5f00\u7684\u6570\u636e\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Microsoft Windows Embedded OpenType\u5b57\u4f53\u5f15\u64ce\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Microsoft Windows Server 2008 R2 SP1",
      "Microsoft Windows Server 2008 SP2",
      "Microsoft Windows 7 SP1"
    ]
  },
  "referenceLink": "http://technet.microsoft.com/security/bulletin/November 2017 Security Updates\r\nhttp://www.securityfocus.com/bid/101736",
  "serverity": "\u4f4e",
  "submitTime": "2017-11-16",
  "title": "Microsoft Windows Embedded OpenType\u5b57\u4f53\u5f15\u64ce\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e"
}

CVE-2017-11835 (GCVE-0-2017-11835)

Vulnerability from cvelistv5 – Published: 2017-11-15 03:00 – Updated: 2024-09-17 02:06

Summary

Microsoft graphics in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to potentially read data that was not intended to be disclosed due to the way that the Microsoft Windows Embedded OpenType (EOT) font engine parses specially crafted embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11832.

Severity

No CVSS data available.

CWE

Information Disclosure

Assigner

microsoft CNA under the mitre root

CNA scorecard B 82/100 over 3962 records in the last 180 days details

References

3 references

URL	Tags
http://www.securityfocus.com/bid/101736	vdb-entryx_refsource_BID
https://portal.msrc.microsoft.com/en-US/security-…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1039782	vdb-entryx_refsource_SECTRACK

Impacted products

1 product

Vendor	Product	Version
Microsoft Corporation	Microsoft Graphics	Affected: Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1.

Date Public

2017-11-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:19:39.212Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "101736",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/101736"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11835"
          },
          {
            "name": "1039782",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039782"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Microsoft Graphics",
          "vendor": "Microsoft Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1."
            }
          ]
        }
      ],
      "datePublic": "2017-11-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Microsoft graphics in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to potentially read data that was not intended to be disclosed due to the way that the Microsoft Windows Embedded OpenType (EOT) font engine parses specially crafted embedded fonts, aka \"Windows EOT Font Engine Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11832."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-15T10:57:01.000Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "101736",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/101736"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11835"
        },
        {
          "name": "1039782",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039782"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "DATE_PUBLIC": "2017-11-14T00:00:00",
          "ID": "CVE-2017-11835",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Microsoft Graphics",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1."
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Microsoft Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Microsoft graphics in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to potentially read data that was not intended to be disclosed due to the way that the Microsoft Windows Embedded OpenType (EOT) font engine parses specially crafted embedded fonts, aka \"Windows EOT Font Engine Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11832."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "101736",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/101736"
            },
            {
              "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11835",
              "refsource": "CONFIRM",
              "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11835"
            },
            {
              "name": "1039782",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039782"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2017-11835",
    "datePublished": "2017-11-15T03:00:00.000Z",
    "dateReserved": "2017-07-31T00:00:00.000Z",
    "dateUpdated": "2024-09-17T02:06:54.051Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted