The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted PDF file, aka "Microsoft PDF Remote Code Execution Vulnerability."

The remote Windows host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in the Windows PDF Library due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this vulnerability, by convincing a user to open a specially crafted PDF file or visit a website containing specially crafted PDF content, to execute arbitrary code.

The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 4013071. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these vulnerabilities by convincing a user to visit a specially crafted website, resulting in the execution of arbitrary code in the context of the current user.

Note that in order to be fully protected from CVE-2017-0071, Microsoft recommends the July 2017 security updates to be installed.

ID	Name	Product	Family	Severity
97731	MS17-009: Security Update for Microsoft Windows PDF Library (4010319)	Nessus	Windows : Microsoft Bulletins	high
97730	MS17-007: Cumulative Security Update for Microsoft Edge (4013071)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2017-0023

high

Tenable Plugins

high

high