virus logo FortiClient Vulnerability

Microsoft Windows Performance Monitor CVE-2017-0170 Information Disclosure Vulnerability

description-logoDescription

An information disclosure vulnerability exists in the Windows Performance Monitor Console when it improperly parses XML input containing a reference to an external entity. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity (XXE) declaration.

affected-products-logoAffected Applications

Windows 10
Windows 7
Windows 8
Windows Server 2008
Windows Server 2012
Windows Server 2016

CVE References

CVE-2017-0170

Other References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0170
ID 36327
Created Jul 11, 2018
Description
Updated		 Dec 21, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon
Coverage FortiClient
OS Windows
Vendor Microsoft
Patch auto
Application Windows 10 , Windows 7 , Windows 8 , Windows Server 2008 , Windows Server 2012 , Windows Server 2016