CVE-2017-8497 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Corporation Microsoft Edge

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer7 documents5 sources
Severity
7.5HIGHNVD
EPSS
15.8%
top 5.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Microsoft Corporation Microsoft EdgeMsrc Microsoft Edge ON Windows 10 Version 1607 FOR 32-bit SystemsMsrc Microsoft Edge ON Windows 10 Version 1607 FOR X64-based Systems+1 more
Timeline
PublishedJun 15
Latest updateMay 14

Description

Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8496.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.6 | Impact: 5.9

Affected Packages4 packages

▶CVEListV5microsoft_corporation/microsoft_edgeMicrosoft Windows 10 1607 and Windows Server 2016.

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-mqqp-mr6w-85x4: Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microso↗2022-05-14
▶
GHSA
GHSA-mqjp-wr5x-p2pq: Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microso↗2022-05-14
▶

📋Vendor Advisories

1
Microsoft
Microsoft Edge Memory Corruption Vulnerability↗2017-06-13
▶

🕵️Threat Intelligence

2
Talos
Microsoft Patch Tuesday - June 2017↗2017-06-13
▶
Zscaler
Zscaler found Multiple Security Vulnerabilities | 06-13-2017↗
▶
CVE-2017-8497 — HIGH severity | cvebase