CVE-2017-0005

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

The vulnerability is an elevation of privilege flaw in the Graphics Device Interface (GDI) component of Microsoft Windows. It affects Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607. The issue permits local users to gain additional privileges through a crafted application and is distinct from the related GDI issues tracked as CVE-2017-0001, CVE-2017-0025, and CVE-2017-0047.

An attacker with the ability to run a malicious application on an affected system (low privileges, no user interaction required) can exploit the flaw to achieve full elevation of privilege, resulting in high impact to confidentiality, integrity, and availability. The CVSS 3.1 base score of 7.8 reflects the local attack vector and low complexity.

Microsoft has published security guidance and an advisory for CVE-2017-0005, along with guidance on detecting and mitigating exploitation attempts.