CVE-2017-0245

MEDIUM

Windows 7 SP1, Server 2008 SP2/R2 SP1, 2012 Gold - Kernel Info Disclosure

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2017-0245. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit demonstrates an information leak vulnerability in Windows 7 (CVE-2017-0245) by hooking a user-mode callback to disclose uninitialized kernel stack memory. The PoC creates a window to trigger the vulnerability and prints leaked memory contents.

Description

The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1 and Windows Server 2012 Gold allow a local authenticated attacker to execute a specially crafted application to obtain kernel information, aka "Win32k Information Disclosure Vulnerability."

Exploits (1)

exploitdb WORKING POC VERIFIED

by Google Security Research · c++doswindows

https://www.exploit-db.com/exploits/42008

View Code ZIP pw:eip

This exploit demonstrates an information leak vulnerability in Windows 7 (CVE-2017-0245) by hooking a user-mode callback to disclose uninitialized kernel stack memory. The PoC creates a window to trigger the vulnerability and prints leaked memory contents.

Classification

Working Poc 100%

Attack Type

Info Leak

Complexity

Moderate

Reliability

Reliable

Target: Microsoft Windows 7 32-bit

Auth required

Prerequisites: Local access to a Windows 7 32-bit system · Ability to execute arbitrary code

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1082 - System Information Discovery

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3

Core References

Exploit, Third Party Advisory exploit x_refsource_exploit-db

https://www.exploit-db.com/exploits/42008/

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/98115

Patch, Vendor Advisory x_refsource_confirm

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0245

Scores

CVSS v3 4.7

EPSS 0.0885

EPSS Percentile 92.8%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (5)

microsoft/windows_7

microsoft/windows_server_2008

microsoft/windows_server_2008 r2 sp1

microsoft/windows_server_2012

Microsoft Corporation/Microsoft Windows Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1 and Windows Server 2012 Gold

Published May 12, 2017

Tracked Since Feb 18, 2026