Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive…

published 2017-03-17 9 y ago modified 2026-06-17 4 mo ago also EUVD-2017-0487

cvss: 4.3; version 3.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 22.8%; EPSS 22.8% chance of exploitation in 30 days, percentile 97%
public exploits: 1; Exploit-DB

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows Uniscribe Information Disclosure Vulnerability."

Patch / fix

links 1

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0120 advisory

Timeline

2017-03-17 Published
2017-03-20 First public exploit (EDB-41655)

Exploit prediction

22.81% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

EDB-41655 Microsoft Windows - Uniscribe Font Processing Multiple Heap Out-of-Bounds and Wild Reads (MS17-011) dos, 2017-03-20

CVSS scores

assigned by	version	score	vector
NVD	3.0	4.3	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
NVD	2.0	4.3	AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

n/a Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2, and R2 SP1, and Windows 7 SP1.

Classification

Weakness

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

portal.msrc.microsoft.com /en-US/security-guidance/advisory/CVE-2017-0120
patch, vendor-advisory
exploit-db.com /exploits/41655/
exploit
securityfocus.com /bid/96667
vdb-entry
securitytracker.com /id/1037992
vdb-entry

Sources

CVE List CVE-2017-0120
NVD CVE-2017-0120

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary