CVE-2017-0039

High · 7.8

CVSS

7.8

EPSS

37.4%

Published

Mar 17, 2017

CISA due date

—

The record

Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle dynamic link library (DLL) loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."

Affected packages

Ecosystem	Package	Introduced	Fixed