Description
A DCOM object in Helppane.exe in Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows HelpPane Elevation of Privilege Vulnerability."
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft Corporation Windows HelpPane
Windows HelpPane in Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016affected
References
- https://www.exploit-db.com/exploits/41607/ ↗
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1021 ↗
- http://blog.inspired-sec.com/archive/2017/03/17/COM-Moniker-Privesc.html ↗
- http://www.securitytracker.com/id/1038001 ↗
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0100 ↗
- http://www.securityfocus.com/bid/96700 ↗