GCVE - cpe:2.3:a:microsoft_corporation:windows_gdi+:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft_corporation:windows_gdi+:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Microsoft Corporation (`fc66ce9b-351f-5bf8-b2d9-ed34143ae0dc`)
Product	Windows Gdi+ (`6d9206f3-9801-59a3-a2f3-2975b1627b48`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-8688`	vulnerable	2026-06-08 05:10:08.739869	Details available Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8684 and CVE-2017-8685. Published: 2017-09-13T01:00:00.000Z Updated: 2024-09-17T03:14:28.315Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/100756 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8688 http://www.securitytracker.com/id/1039338	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8685`	vulnerable	2026-06-08 05:10:08.738490	Details available Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8684 and CVE-2017-8688. Published: 2017-09-13T01:00:00.000Z Updated: 2024-09-16T22:36:19.088Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/42748/ http://www.securitytracker.com/id/1039338 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8685 http://www.securityfocus.com/bid/100724	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8684`	vulnerable	2026-06-08 05:10:08.737889	Details available Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1, allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8685 and CVE-2017-8688. Published: 2017-09-13T01:00:00.000Z Updated: 2024-09-16T23:26:04.022Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8684 http://www.securityfocus.com/bid/100782 http://www.securitytracker.com/id/1039338 https://www.exploit-db.com/exploits/42747/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-0073`	vulnerable	2026-06-08 05:08:25.372385	Details available The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows GDI+ Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0060 and CVE-2017-0062. Published: 2017-03-17T00:00:00.000Z Updated: 2024-08-05T12:55:19.045Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1038002 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0073 http://www.securityfocus.com/bid/96637	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-0062`	vulnerable	2026-06-08 05:08:25.361951	Details available The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "GDI+ Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0060 and CVE-2017-0073. Published: 2017-03-17T00:00:00.000Z Updated: 2024-08-05T12:55:17.639Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/96715 http://www.securitytracker.com/id/1038002 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0062 https://www.exploit-db.com/exploits/41658/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-0060`	vulnerable	2026-06-08 05:08:25.350695	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.