CVE-2017-0101

Windows Transaction Manager Elevation of Privilege Vulnerability

CVE-2017-0101 is fixed in 8 products on 1 platform, first by KB4012215, released March 14, 2017. It is being exploited: CISA added it to the Known Exploited Vulnerabilities catalog on March 15, 2022, with known ransomware use. Patch Radar priority: Patch now.

Patch nowCISA KEVKnown ransomware use
CVSS
6.3
Important
Exploitation
Exploited
Listed by CISA
CISA KEV
Mar 15, 2022
Federal due date Apr 5, 2022. Known ransomware use
EPSS
0.5748
99th percentile

<p>An elevation of privilege vulnerability exists when the Windows Transaction Manager improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p> <p>In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to take control over the affected system.</p> <p>The security update addresses the vulnerability by correcting how the Transaction Manager handles objects in memory.</p>

Where it's fixed

ProductFixed inFixReleased
Microsoft
Windows 7 for 32-bit Systems Service Pack 1 KB4012215 Mar 14, 2017
Windows 7 for 32-bit Systems Service Pack 1 KB4012212 Mar 14, 2017
Windows Server 2008 for 32-bit Systems Service Pack 2 KB4011981 Mar 14, 2017
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) KB4011981 Mar 14, 2017
Windows Server 2008 for Itanium-Based Systems Service Pack 2 KB4011981 Mar 14, 2017
Windows Server 2008 for x64-based Systems Service Pack 2 KB4011981 Mar 14, 2017
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) KB4011981 Mar 14, 2017
Windows Vista Service Pack 2 KB4011981 Mar 14, 2017
Windows Vista x64 Edition Service Pack 2 KB4011981 Mar 14, 2017