CVE-2017-0201
HighSummary
A remote code execution vulnerability exists in Internet Explorer in the way that the JScript and VBScript engines render when handling objects in memory. An attacker could exploit this vulnerability to execute arbitrary code in the context of the current user.
Risk Assessment
This vulnerability could lead to an attacker gaining control over the system, posing a serious threat to the security of the organization's data and systems.
Recommendation
It is recommended to update Internet Explorer to the latest version and implement appropriate security measures to mitigate the risk of exploitation of this vulnerability.
Other vulnerabilities in Internet Explorer
See all- CVE-2017-11913High
Internet Explorer in Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how Internet Explorer handles objects in memory.
- CVE-2017-11907High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, as well as Windows 10 and Windows Server 2016, allows an attacker to gain the same user rights as the current user due to improper handling of objects in memory. This is known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-11903High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user due to how Internet Explorer handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-11901High
Internet Explorer in Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 has a vulnerability that allows an attacker to gain the same user rights as the current user. The issue arises from how Internet Explorer handles objects in memory.
- CVE-2017-11869High
Internet Explorer in Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 allows an attacker to gain the same user rights as the current user due to how Microsoft browsers handle objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-11856High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 (all versions up to 1709) and Windows Server 2016 allows an attacker to gain the same user rights as the current user due to improper handling of objects in memory.
- CVE-2017-11855High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and version 1709 allows an attacker to gain the same user rights as the current user, due to how Internet Explorer handles objects in memory.
- CVE-2017-11822High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory.
- CVE-2017-11813High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory.
- CVE-2017-11810High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, as well as Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory.
Original NVD description (English source)
A remote code execution vulnerability exists in Internet Explorer in the way that the JScript and VBScript engines render when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0093.