CVE-2017-0202
HighSummary
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. This vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.
Risk Assessment
This vulnerability poses a significant risk to organizations as it allows attackers to potentially take control of the user's system. This could lead to data theft or the introduction of malware.
Recommendation
It is recommended to update Internet Explorer to the latest version and implement additional security measures such as user privilege restrictions and network activity monitoring.
Other vulnerabilities in Internet Explorer
See all- CVE-2017-11913High
Internet Explorer in Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how Internet Explorer handles objects in memory.
- CVE-2017-11907High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, as well as Windows 10 and Windows Server 2016, allows an attacker to gain the same user rights as the current user due to improper handling of objects in memory. This is known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-11903High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user due to how Internet Explorer handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-11901High
Internet Explorer in Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 has a vulnerability that allows an attacker to gain the same user rights as the current user. The issue arises from how Internet Explorer handles objects in memory.
- CVE-2017-11869High
Internet Explorer in Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 allows an attacker to gain the same user rights as the current user due to how Microsoft browsers handle objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-11856High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 (all versions up to 1709) and Windows Server 2016 allows an attacker to gain the same user rights as the current user due to improper handling of objects in memory.
- CVE-2017-11855High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and version 1709 allows an attacker to gain the same user rights as the current user, due to how Internet Explorer handles objects in memory.
- CVE-2017-11822High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory.
- CVE-2017-11813High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory.
- CVE-2017-11810High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, as well as Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory.
Original NVD description (English source)
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user, a.k.a. "Internet Explorer Memory Corruption Vulnerability."