RULE(RULE ID:711235)

Rule General Information
Release Date: 2017-09-15
Rule Name: Microsoft Windows Graphics Component META_SETDIBTODEV Information Disclosure Vulnerability (CVE-2017-0190)
Severity:
CVE ID:
Rule Protection Details
Description: An information disclosure vulnerability has been reported in the GDI component of Microsoft Windows. The vulnerability is due to an out-of-bounds memory access when processing META_SETDIBTODEV records in a WMF file.
Impact: An attacker can abtain sensitive information of the target victim, and do malicious actions to gain profits using the information.
Affected OS: Windows
Reference: CVE-2017-0190
Solutions
Update vendor's patch.