CVE-2017-11927 (CNNVD-201712-378)
中文标题:
Microsoft Windows 安全漏洞
英文标题:
Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R...
漏洞描述
中文描述:
Microsoft Windows 7 SP1等都是美国微软（Microsoft）公司的一系列操作系统。 Microsoft Windows中存在信息泄露漏洞，该漏洞源于its://协议处理器不必要的将流量发送到远程网站，来决定请求区域。攻击者可利用该漏洞实施暴力破解攻击，获取相应的散列密码。以下版本受到影响：Microsoft Windows 7 SP1，Windows 8.1和RT 8.1，Windows Server 2008 SP2和R2 SP1，Windows Server 2012和R2，Windows 10，Windows 10版本1511，Windows 10版本1607，Windows 10版本1703，Windows 10版本1709，Windows Server 2016，Windows Server版本1709。
英文描述:
Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow an information vulnerability due to the way the Windows its:// protocol handler determines the zone of a request, aka "Microsoft Windows Information Disclosure Vulnerability".
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Microsoft Corporation | Microsoft Windows | Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 | - | - |
cpe:2.3:a:microsoft_corporation:microsoft_windows:windows_7_sp1,_windows_8.1_and_rt_8.1,_windows_server_2008_sp2_and_r2_sp1,_windows_server_2012_and_r2,_windows_10_gold,_1511,_1607,_1703_and_1709,_windows_server_2016_and_windows_server,_version_1709:*:*:*:*:*:*:*
|
| microsoft | windows_10 | - | - | - |
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
|
| microsoft | windows_10 | 1511 | - | - |
cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*
|
| microsoft | windows_10 | 1607 | - | - |
cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
|
| microsoft | windows_10 | 1703 | - | - |
cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*
|
| microsoft | windows_10 | 1709 | - | - |
cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
|
| microsoft | windows_7 | - | - | - |
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
|
| microsoft | windows_8.1 | * | - | - |
cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*
|
| microsoft | windows_rt_8.1 | * | - | - |
cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*
|
| microsoft | windows_server | 1709 | - | - |
cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*
|
| microsoft | windows_server_2008 | - | - | - |
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
|
| microsoft | windows_server_2008 | r2 | - | - |
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
|
| microsoft | windows_server_2012 | * | - | - |
cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*
|
| microsoft | windows_server_2012 | r2 | - | - |
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
|
| microsoft | windows_server_2016 | - | - | - |
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2017-11927 |
2025-11-11 15:19:17 | 2025-11-11 07:34:33 |
| NVD | nvd_CVE-2017-11927 |
2025-11-11 14:55:34 | 2025-11-11 07:43:12 |
| CNNVD | cnnvd_CNNVD-201712-378 |
2025-11-11 15:09:56 | 2025-11-11 07:53:28 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 信息泄露
- cnnvd_id: 未提取 -> CNNVD-201712-378
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- cvss_score: 未提取 -> 6.5
- cvss_vector: NOT_EXTRACTED -> CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- cvss_version: NOT_EXTRACTED -> 3.0
- affected_products_count: 1 -> 15
- data_sources: ['cve'] -> ['cve', 'nvd']