Microsoft security update for CVE-2017-0022
🔗 CVE IDs covered (1)
📋 Microsoft's advisory
EchelonGraph does not copy Microsoft's advisory page: its FAQ and remediation text are not shown here. Read the advisory on https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0022. This page also shows what EchelonGraph holds for CVE-2017-0022, with the description from its CVE record, which the CVE Numbering Authority that assigned the CVE wrote: for a CVE Microsoft assigned, often in the words of Microsoft's own advisory.
🎯 Affected products34
- Microsoft XML Core Services 3.0 on Windows 10 Version 1511 for 32-bit Systems
- Microsoft XML Core Services 3.0 on Windows 10 Version 1511 for x64-based Systems
- Microsoft XML Core Services 3.0 on Windows 10 Version 1607 for 32-bit Systems
- Microsoft XML Core Services 3.0 on Windows 10 Version 1607 for x64-based Systems
- Microsoft XML Core Services 3.0 on Windows 10 for 32-bit Systems
- Microsoft XML Core Services 3.0 on Windows 10 for x64-based Systems
- Microsoft XML Core Services 3.0 on Windows 7 for 32-bit Systems Service Pack 1
- Microsoft XML Core Services 3.0 on Windows 7 for x64-based Systems Service Pack 1
- Microsoft XML Core Services 3.0 on Windows 8.1 for 32-bit systems
- Microsoft XML Core Services 3.0 on Windows 8.1 for x64-based systems
- Microsoft XML Core Services 3.0 on Windows RT 8.1
- Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
- Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
- Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
- Microsoft XML Core Services 3.0 on Windows Server 2008 for 32-bit Systems Service Pack 2
- Microsoft XML Core Services 3.0 on Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
- Microsoft XML Core Services 3.0 on Windows Server 2008 for Itanium-Based Systems Service Pack 2
- Microsoft XML Core Services 3.0 on Windows Server 2008 for x64-based Systems Service Pack 2
- Microsoft XML Core Services 3.0 on Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
- Microsoft XML Core Services 3.0 on Windows Server 2012
- Microsoft XML Core Services 3.0 on Windows Server 2012 (Server Core installation)
- Microsoft XML Core Services 3.0 on Windows Server 2012 R2
- Microsoft XML Core Services 3.0 on Windows Server 2012 R2 (Server Core installation)
- Microsoft XML Core Services 3.0 on Windows Server 2016
- Microsoft XML Core Services 3.0 on Windows Server 2016 (Server Core installation)
- Microsoft XML Core Services 3.0 on Windows Vista Service Pack 2
- Microsoft XML Core Services 3.0 on Windows Vista x64 Edition Service Pack 2
- Windows 8.1 for 32-bit systems
- Windows 8.1 for x64-based systems
- Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
- +4 more not shown
✅ Updates Microsoft lists: 10 KB articles and 1 other update
11 rows: one per KB article or update, update type and fixed build. Their details are on Microsoft's advisory.
🧭 EchelonGraph on CVE-2017-0022
- EchelonGraph score
- 9.0 CRITICAL
- CISA KEV
- Listed since May 24, 2022
- Fix status
- A fix is available — apply it.
Description from the CVE record (CVE.org), as published by its numbering authority
Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site, aka "Microsoft XML Information Disclosure Vulnerability."
Published by Microsoft Corporation, the CVE Numbering Authority that assigned CVE-2017-0022, in its CVE record at CVE.org; reused under the CVE Program's Terms of Use (its licence and MITRE's copyright notice are in our Terms of Service).
🔗 References (21)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0022
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216
- referencehttps://support.microsoft.com/en-us/help/4012216
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213
- referencehttps://support.microsoft.com/en-us/help/4012213
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215
- referencehttps://support.microsoft.com/en-us/help/4012215
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212
- referencehttps://support.microsoft.com/en-us/help/4012212
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217
- referencehttps://support.microsoft.com/en-us/help/4012217
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214
- referencehttps://support.microsoft.com/en-us/help/4012214
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3216916
- referencehttps://support.microsoft.com/en-us/kb/3216916
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606
- referencehttps://support.microsoft.com/en-us/kb/4012606
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198
- referencehttps://support.microsoft.com/en-us/kb/4013198
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429
- referencehttps://support.microsoft.com/en-us/kb/4013429