CVE-2017-8609
HighSummary
A vulnerability in the JavaScript engine of Microsoft Internet Explorer allows an attacker to execute arbitrary code in the context of the current user. The issue occurs in Windows 10 and Windows Server 2016 when the engine improperly handles objects in memory.
Risk Assessment
An attacker could exploit this vulnerability to gain control over the user's system, potentially leading to data theft or the introduction of malware.
Recommendation
It is recommended to update the operating system to the latest version and apply security patches provided by Microsoft.
Other vulnerabilities in Microsoft Internet Explorer
See all- CVE-2016-7283High
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-3384High
Microsoft Internet Explorer versions 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-3353High
Microsoft Internet Explorer versions 9 through 11 mishandles .url files from the Internet zone, allowing remote attackers to bypass intended access restrictions via a crafted file.
- CVE-2016-3324High
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-3290High
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted web page. This is a memory corruption vulnerability in the browser.
- CVE-2016-3288High
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted web page, known as 'Internet Explorer Memory Corruption Vulnerability.'
- CVE-2016-3243High
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-3242High
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
- CVE-2016-3241High
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2016-3240 and CVE-2016-3242.
- CVE-2016-3240High
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability in Internet Explorer.
Original NVD description (English source)
Microsoft Internet Explorer in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8596, CVE-2017-8610, CVE-2017-8618, CVE-2017-8619, CVE-2017-8595, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609.