Buffer overflow in Microsoft Windows Server 2003 Sp1, Sp2 Xp - Sp3
CVE-2017-0176
A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a remote attacker to execute arbitrary code on the target computer, provided that the computer is joined in a Windows domain and has Remote Desktop Protocol connectivity (or Terminal Services) enabled.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.458 (98.8th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 99th percentile — 98.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.458 · newest: 0.458 · change: 0.000
Affected products
- Microsoft Windows Server 2003 Sp1, Sp2 Xp - Sp3 — versions Microsoft Windows Server 2003 SP1, SP2 Windows XP - SP3
- Microsoft Windows Server 2003
- Microsoft Windows Xp
Weakness classification (CWE)
Public proof-of-concept exploits
References
- www.securityfocus.com/bid/98550 (VDB Entry, Third Party Advisory, vdb-entry)
- support.microsoft.com/en-us/help/4022747/security-update-for-windows-xp-and-win… (Patch, Vendor Advisory)
- www.securityfocus.com/bid/98752 (VDB Entry, Third Party Advisory, vdb-entry)
- blog.fortinet.com/2017/05/11/deep-analysis-of-esteemaudit (Exploit, Third Party Advisory)
- blogs.technet.microsoft.com/msrc/2017/04/14/protecting-customers-and-evaluating… (Patch, Vendor Advisory)
- blog.0patch.com/2017/06/a-quick-analysis-of-microsofts.html
Frequently asked questions
- What is CVE-2017-0176?
- CVE-2017-0176 is a high-severity vulnerability in Microsoft Windows Server 2003 Sp1, Sp2 Xp - Sp3, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 8.1/10. Published 2017-06-22.
- How severe is CVE-2017-0176?
- High severity. CVSS v3 base score is 8.1 out of 10.
- Is CVE-2017-0176 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.