CVE-2017-0001

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

The vulnerability is an elevation of privilege flaw in the Graphics Device Interface (GDI) component of Microsoft Windows. It affects Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607. Local users can exploit the issue by running a crafted application, which enables them to gain additional privileges on the system. The weakness is tracked as CVE-2017-0001 and is distinct from related GDI issues in CVE-2017-0005, CVE-2017-0025, and CVE-2017-0047.

A local attacker with the ability to execute code on an affected system can leverage the flaw to elevate privileges. The CVSS 3.1 base score of 7.8 reflects that the attack requires low complexity, no user interaction beyond running the application, and yields high impact to confidentiality, integrity, and availability under a local attack vector.

Microsoft published guidance for the issue through its Security Response Center advisory at https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0001, along with supporting details on vendor tracking sites such as SecurityFocus and SecurityTracker. No information is provided on observed in-the-wild exploitation.