CVE-2017-0049 — Sensitive Information Exposure in Corporation Internet Explorer
Severity
4.3MEDIUMNVD
CNA7.5
EPSS
22.0%
top 4.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 17
Latest updateMay 17
Description
The VBScript engine in Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0018, and CVE-2017-0037.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4
Affected Packages2 packages
▶CVEListV5microsoft_corporation/internet_explorerThe VBScript engine in Microsoft Internet Explorer 11
Patches
🔴Vulnerability Details
2GHSA▶
GHSA-vrcm-c43w-vj64: The VBScript engine in Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web si↗2022-05-17
CVEList▶
CVE-2017-0049: The VBScript engine in Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web si↗2017-03-17