CVE-2017-0108 (CNNVD-201703-754)
中文标题:
多款Microsoft产品Windows Graphics组件缓冲区错误漏洞
英文标题:
The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Bu...
漏洞描述
中文描述:
Microsoft Office 2007 SP3等都是美国微软（Microsoft）公司的办公软件。Windows Graphics是其中的一个图形设备接口。 多款Microsoft产品中的Windows Graphics组件存在远程代码执行漏洞。远程攻击者可借助特制的Web站点利用该漏洞执行任意代码。以下产品和版本受到影响：Microsoft Office 2007 SP3，2010 SP2，Word Viewer，Skype for Business 2016，Lync 2013 SP1，Lync 2010，Live Meeting 2007，Silverlight 5，Windows Vista SP2，Windows Server 2008 SP2和R2 SP1，Windows 7 SP1。
英文描述:
The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Graphics Component Remote Code Execution Vulnerability." This vulnerability is different from that described in CVE-2017-0014.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Microsoft Corporation | Windows Graphics Component | The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 | - | - |
cpe:2.3:a:microsoft_corporation:windows_graphics_component:the_windows_graphics_component_in_microsoft_office_2007_sp3;_2010_sp2;_and_word_viewer;_skype_for_business_2016;_lync_2013_sp1;_lync_2010;_live_meeting_2007;_silverlight_5;_windows_vista_sp2;_windows_server_2008_sp2_and_r2_sp1;_and_windows_7_sp1:*:*:*:*:*:*:*
|
| microsoft | live_meeting | 2007 | - | - |
cpe:2.3:a:microsoft:live_meeting:2007:*:*:*:*:*:*:*
|
| microsoft | lync | 2010 | - | - |
cpe:2.3:a:microsoft:lync:2010:*:*:*:*:*:*:*
|
| microsoft | lync | 2013 | - | - |
cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:*:*
|
| microsoft | office | 2007 | - | - |
cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*
|
| microsoft | office | 2010 | - | - |
cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
|
| microsoft | silverlight | 5.0 | - | - |
cpe:2.3:a:microsoft:silverlight:5.0:*:*:*:*:*:*:*
|
| microsoft | skype_for_business | 2016 | - | - |
cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:*
|
| microsoft | word_viewer | - | - | - |
cpe:2.3:a:microsoft:word_viewer:-:*:*:*:*:*:*:*
|
| microsoft | windows_7 | - | - | - |
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
|
| microsoft | windows_server_2008 | - | - | - |
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
|
| microsoft | windows_server_2008 | r2 | - | - |
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
|
| microsoft | windows_vista | - | - | - |
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2017-0108 |
2025-11-11 15:19:14 | 2025-11-11 07:34:28 |
| NVD | nvd_CVE-2017-0108 |
2025-11-11 14:55:26 | 2025-11-11 07:43:08 |
| CNNVD | cnnvd_CNNVD-201703-754 |
2025-11-11 15:09:47 | 2025-11-11 07:52:57 |
| EXPLOITDB | exploitdb_EDB-41647 |
2025-11-11 15:05:50 | 2025-11-11 08:43:12 |
版本与语言
安全公告
变更历史
查看详细变更
- references_count: 4 -> 7
- tags_count: 0 -> 4
- data_sources: ['cnnvd', 'cve', 'nvd'] -> ['cnnvd', 'cve', 'exploitdb', 'nvd']
查看详细变更
- vulnerability_type: 未提取 -> 授权问题
- cnnvd_id: 未提取 -> CNNVD-201703-754
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- severity: SeverityLevel.MEDIUM -> SeverityLevel.HIGH
- cvss_score: 未提取 -> 7.8
- cvss_vector: NOT_EXTRACTED -> CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- cvss_version: NOT_EXTRACTED -> 3.0
- affected_products_count: 1 -> 13
- data_sources: ['cve'] -> ['cve', 'nvd']