CVE-2017-8591

Windows Input Method Editor (IME) in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an remote code execution vulnerability when it fails to properly handle objects in memory, aka "Windows IME Remote Code Execution Vulnerability".

Published: Aug 8, 2017
Updated: Apr 13, 2023
CVE: CVE-2017-8591
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
microsoft / windows_rt_8.1	-	-
microsoft / windows_server_2012	r2	r2.x
microsoft / windows_server_2016	-	-
microsoft / windows_10	1511	1511.x
microsoft / windows_10	1607	1607.x
microsoft / windows_8.1	-	-
microsoft / windows_server_2012	-	-
microsoft / windows_10	1703	1703.x

http://www.securityfocus.com/bid/99430
http://www.securitytracker.com/id/1039097
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8591

Vulnerability Database

289,598

CVE-2017-8591