Windows Explorer Denial of Service Vulnerability
CVE-2017-8587 is fixed in 21 products on 1 platform, first by KB4025344, released July 11, 2017. It is not reported as exploited. Patch Radar priority: Routine.
<p>An Denial Of Service vulnerability exists when Windows Explorer attempts to open a non-existent file. An attacker who successfully exploited this vulnerability could cause a denial of service.</p> <p>A attacker could exploit this vulnerability by hosting a specially crafted web site and convince a user to browse to the page, containing the reference to the non-existing file, and cause the victim's system to stop responding. An attacker could not force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site</p> <p>The update addresses the vulnerability by correcting how Windows Explorer handles open attempts for non-existent files.</p>
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Microsoft | |||
| Windows 10 Version 1511 for 32-bit Systems | 10586.1007 | KB4025344 | Jul 11, 2017 |
| Windows 10 Version 1511 for x64-based Systems | 10586.1007 | KB4025344 | Jul 11, 2017 |
| Windows 10 for 32-bit Systems | 10240.17488 | KB4025338 | Jul 11, 2017 |
| Windows 10 for x64-based Systems | 10240.17488 | KB4025338 | Jul 11, 2017 |
| Windows 7 for 32-bit Systems Service Pack 1 | KB4025341 | Jul 11, 2017 | |
| Windows 7 for 32-bit Systems Service Pack 1 | KB4025337 | Jul 11, 2017 | |
| Windows 7 for x64-based Systems Service Pack 1 | KB4025341 | Jul 11, 2017 | |
| Windows 7 for x64-based Systems Service Pack 1 | KB4025337 | Jul 11, 2017 | |
| Windows 8.1 for 32-bit systems | KB4025333 | Jul 11, 2017 | |
| Windows 8.1 for 32-bit systems | KB4025336 | Jul 11, 2017 | |
| Windows 8.1 for x64-based systems | KB4025333 | Jul 11, 2017 | |
| Windows 8.1 for x64-based systems | KB4025336 | Jul 11, 2017 | |
| Windows RT 8.1 | KB4025336 | Jul 11, 2017 | |
| Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 | KB4025341 | Jul 11, 2017 | |
| Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 | KB4025337 | Jul 11, 2017 | |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 | KB4025341 | Jul 11, 2017 | |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 | KB4025337 | Jul 11, 2017 | |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | KB4025341 | Jul 11, 2017 | |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | KB4025337 | Jul 11, 2017 | |
| Windows Server 2008 for 32-bit Systems Service Pack 2 | KB4025674 | Jul 11, 2017 | |
| Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) | KB4025674 | Jul 11, 2017 | |
| Windows Server 2008 for Itanium-Based Systems Service Pack 2 | KB4025674 | Jul 11, 2017 | |
| Windows Server 2008 for x64-based Systems Service Pack 2 | KB4025674 | Jul 11, 2017 | |
| Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) | KB4025674 | Jul 11, 2017 | |
| Windows Server 2012 | KB4025343 | Jul 11, 2017 | |
| Windows Server 2012 | KB4025331 | Jul 11, 2017 | |
| Windows Server 2012 (Server Core installation) | KB4025343 | Jul 11, 2017 | |
| Windows Server 2012 (Server Core installation) | KB4025331 | Jul 11, 2017 | |
| Windows Server 2012 R2 | KB4025333 | Jul 11, 2017 | |
| Windows Server 2012 R2 | KB4025336 | Jul 11, 2017 | |
| Windows Server 2012 R2 (Server Core installation) | KB4025333 | Jul 11, 2017 | |
| Windows Server 2012 R2 (Server Core installation) | KB4025336 | Jul 11, 2017 | |