Security readout for executives and security teams
CVE-2017-0284 is a Microsoft Uniscribe information disclosure flaw affecting multiple Windows and Office versions. In business terms, vulnerable systems could expose memory contents to an attacker. The provided sources do not include CVSS, a named patch, or evidence of active exploitation. Exposure is most likely on legacy Microsoft endpoints, servers, and Office installations matching the listed versions, especially Windows 7, Windows Server 2008/2012/2016, early Windows 10 builds, Office 2007, and Office 2010. Treat this as a legacy-platform hygiene issue with moderate urgency. The main risk is sensitive memory disclosure on older Microsoft systems, amplified by public exploit reference availability and the age of affected products. Mitigation focus: Inventory endpoints and servers for the listed Windows and Office versions.; Check MSRC guidance for the applicable update or mitigation path.; Prioritize remediation for internet-facing or high-value legacy Windows systems..
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2017-0284 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0284CVE reference · x_refsource_CONFIRM
- 42235CVE reference · exploit, x_refsource_EXPLOIT-DB
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.