Description
Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse crafted .msdvd files, which allows attackers to obtain information to compromise a target system, aka "Windows DVD Maker Cross-Site Request Forgery Vulnerability."
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft Corporation Windows DVD Maker
Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2affected
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0045 ↗
- http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DVD-MAKER-XML-EXTERNAL-ENTITY-FILE-DISCLOSURE.txt ↗
- http://www.securitytracker.com/id/1038015 ↗
- https://www.exploit-db.com/exploits/41619/ ↗
- http://www.securityfocus.com/bid/96103 ↗