CVE-2017-0045

CVE Database · CVE-2017-0045

CVE-2017-0045

· N/AModified

CVSS v3.1

N/A

EPSS

6.32%

Published

Mar 16, 2017

Modified

May 12, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBMicrosoft Windows DVD Maker 6.1.7 - XML External Entity Injection TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse crafted .msdvd files, which allows attackers to obtain information to compromise a target system, aka "Windows DVD Maker Cross-Site Request Forgery Vulnerability."

Weaknesses (CWE)

CWE-352

Affected Products (4)

microsoft · windows_7vulnerable

microsoft · windows_server_2008vulnerable

microsoft · windows_vistavulnerable

References (10)

http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DVD-MAKER-XML-EXTERNAL-ENTITY-FILE-DISCLOSURE.txt

ExploitThird Party Advisory

http://www.securityfocus.com/bid/96103

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1038015

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0045

PatchVendor Advisory

https://www.exploit-db.com/exploits/41619/

http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DVD-MAKER-XML-EXTERNAL-ENTITY-FILE-DISCLOSURE.txt

ExploitThird Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs