Vulnerability CVE-2017-0228

Vulnerability CVE-2017-0228

Published: 2017-05-12

Description:

A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236, and CVE-2017-0238.

CVSS2 => (AV:N/AC:H/Au:N/C:C/I:C/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
7.6/10	10/10	4.9/10

Exploit range	Attack complexity	Authentication
Remote	High	No required
Confidentiality impact	Integrity impact	Availability impact
Complete	Complete	Complete

Affected software
Microsoft -> EDGE
Microsoft -> Internet explorer

References:

http://www.securityfocus.com/bid/98164

http://www.securitytracker.com/id/1038425

http://www.securitytracker.com/id/1038426

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0228

Copyright 2024, cxsecurity.com