Product:
Graphics Device Interface
Summary
The Graphics Device Interface in Microsoft Windows allows local users to gain privileges via a crafted application. This vulnerability is known as Windows GDI Elevation of Privilege Vulnerability. It affects multiple versions of Windows including Vista, Server 2008, Windows 7, 8.1, and 10.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2017-0001 |
Exploitation
To exploit this vulnerability, an attacker must create a specially crafted application that targets the Graphics Device Interface. Once the application is executed by a local user, it can elevate privileges, allowing the attacker to perform unauthorized actions on the system.
Affected Products
- Windows Vista SP2
- Windows Server 2008 SP2 and R2 SP1
- Windows 7 SP1
- Windows 8.1
- Windows Server 2012 Gold and R2
- Windows RT 8.1
- Windows 10 Gold, 1511, and 1607
Mitigation
To mitigate this vulnerability, users should apply updates as per the vendor’s instructions. Keeping systems updated is crucial to protect against potential exploitation.