CVE-2017-11813 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Corporation Internet Explorer

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer6 documents5 sources

Severity

7.5HIGHNVD

EPSS

20.5%

top 4.42%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Corporation Internet Explorer Microsoft Internet Explorer

Timeline

PublishedOct 13

Latest updateMay 17

Description

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka "Internet Explorer Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11822.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.6 | Impact: 5.9

Affected Packages2 packages

▶NVDmicrosoft/internet_explorer11

▶CVEListV5microsoft_corporation/internet_explorerMicrosoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2., Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.+1

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

GHSA

GHSA-vvqm-6jw3-5qj8: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8↗2022-05-17

▶

CVEList

CVE-2017-11813: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8↗2017-10-13

▶

📋Vendor Advisories

Microsoft

Internet Explorer Memory Corruption Vulnerability↗2017-10-10

▶