Integer Overflow in usp10.dll

vendor:

Windows

by:

Hossein Lotfi

8.8

CVSS

HIGH

Heap-based Buffer Overflow

119

CWE

Product Name: Windows

Affected Version From: Not specified

Affected Version To: Not specified

Patch Exists: YES

Related CWE: CVE-2016-7274

CPE: cpe:2.3:a:microsoft:windows:*:*:*:*:*:*:*:*

Metasploit:

Other Scripts:

Platforms Tested: Not specified

2016

An integer overflow error within the 'LoadUvsTable()' function of usp10.dll can be exploited to cause a heap-based buffer overflow.

Apply the patch provided by Microsoft in MS17-013.

Source