CVE-2017-0200Improper Restriction of Operations within the Bounds of a Memory Buffer in Corporation Edge

Severity
7.5HIGHNVD
EPSS
29.4%
top 3.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 12
Latest updateMay 17

Description

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user, aka "Microsoft Edge Memory Corruption Vulnerability."

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.6 | Impact: 5.9

Affected Packages1 packages

Patches

🔴Vulnerability Details

2
GHSA
GHSA-wghj-f4r9-346h: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory2022-05-17
CVEList
CVE-2017-0200: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory2017-04-12

💥Exploits & PoCs

1
Exploit-DB
Systemd 228 (SUSE 12 SP2 / Ubuntu Touch 15.04) - Local Privilege Escalation2017-01-24

📋Vendor Advisories

2
Red Hat
squirrelmail: Insufficient escaping of user-supplied data2017-04-19
Microsoft
Microsoft Edge Memory Corruption Vulnerability2017-04-11

🕵️Threat Intelligence

5
Talos
Microsoft Patch Tuesday - April 20172017-04-12
Talos
Microsoft Patch Tuesday - April 20172017-04-12
Qualys
Microsoft Fixes 45 Vulnerabilities with new Security Update Guide – says goodbye to Security Bulletins2017-04-11
Qualys
Microsoft Fixes 45 Vulnerabilities with new Security Update Guide - says goodbye to Security Bulletins | Qualys2017-04-11
Zscaler
Zscaler protects against 16 new vulnerabilities for MS
CVE-2017-0200 — Corporation Edge vulnerability | cvebase