CVEvulnerability
CVE-2017-0104
8.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-03-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.1 HIGH — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-190
Description
The iSNS Server service in Microsoft Windows Server 2008 SP2 and R2, Windows Server 2012 Gold and R2, and Windows Server 2016 allows remote attackers to issue malicious requests via an integer overflow, aka "iSNS Server Memory Corruption Vulnerability."
Affected configurations
• microsoft windows server 2008
• microsoft windows server 2008 r2
• microsoft windows server 2012
• microsoft windows server 2012 r2
• microsoft windows server 2016
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- http://www.securityfocus.com/bid/96697 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038001 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0104 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/96697 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038001 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0104 Patch, Vendor Advisory