CVE-2017-0213

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

The vulnerability CVE-2017-0213 resides in the Windows COM Aggregate Marshaler component and affects Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold/1511/1607/1703, and Windows Server 2016. It is classified as an elevation-of-privilege flaw distinct from CVE-2017-0214, with a CVSS 3.1 base score of 7.3 under the vector AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.

An attacker who can execute a specially crafted application on a vulnerable system is able to leverage the flaw to elevate privileges, potentially achieving full control over confidentiality, integrity, and availability on the host. The attack requires local access and some user interaction but does not demand high privileges or complex conditions.

Microsoft's security advisory at https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213 supplies patch information and mitigation guidance for supported platforms. Public exploit code demonstrating the issue has been published on Exploit-DB.