A DCOM object in Helppane.exe in Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows HelpPane Elevation of Privilege Vulnerability."
Product | CPU Architecture | Version | Update | Tested |
---|---|---|---|---|
Windows 7 | ||||
Windows 7 | x86/x64 | SP1 | ||
Windows Rt | ||||
Windows 8.1 | x86/x64 | |||
Windows 10 | x86/x64 | |||
Windows Server 2008 | x86/x64 | R2 | SP1 | |
Windows Server 2012 | R2 | |||
Windows Server 2012 | ||||
Windows Server 2016 |
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0100
该漏洞并未进行测试,根目录留存着网络收集**[CVE编号].zip**的EXP或者POC,代码状态未知