CVE:CVE-2017-0285
CNNVD:CNNVD-201706-496
Microsoft Windows和Microsoft Office都是美国微软（Microsoft）公司的产品。Microsoft Windows是一系列操作系统；Microsoft Office是一款办公软件套件产品。Uniscribe（又名Unicode Script Processor）是其中的一个能够使Windows操作系统正确演示Unicode文字的组件。
Microsoft Windows和Microsoft Office中的Uniscribe存在信息泄露漏洞。攻击者可利用该漏洞获取内存中的内容。以下产品和版本受到影响：Microsoft Windows Server 2008 SP2和R2 SP1，Windows 7 SP1，Windows 8.1，Windows Server 2012 Gold和R2，Windows RT 8.1，Windows 10，Windows 10版本1511，Windows 10版本1607，Windows 10版本1703，Windows Server 2016，Microsoft Office 2007 SP3，Microsoft Office 2010 SP2，Microsoft Office Word Viewer。
solution:Upgrade microsoft office to a higher version than 2007:sp3,2010:sp2,and avoid the version 2007:sp3,2010:sp2; Upgrade microsoft office_word_viewer to a higher version than -; Upgrade microsoft windows_10 to a higher version than -,1511,1607,1703,and avoid the version 1511,1607,1703; Upgrade microsoft windows_7 to a higher version than -:sp1,and avoid the version -:sp1; Upgrade microsoft windows_8.1 to a higher version than -; Upgrade microsoft windows_rt_8.1 to a higher version than *; Upgrade microsoft windows_server_2008 to a higher version than -:sp2,r2:sp1,and avoid the version -:sp2,r2:sp1; Upgrade microsoft windows_server_2012 to a higher version than -,r2,and avoid the version r2; Upgrade microsoft windows_server_2016 to a higher version than -