CVE-2017-8651 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Corporation Internet Explorer

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer7 documents6 sources
Severity
7.5HIGHNVD
EPSS
17.3%
top 4.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft Corporation Internet ExplorerMicrosoft Internet Explorer
Timeline
PublishedAug 8
Latest updateMay 17

Description

Internet Explorer in Microsoft Windows Server 2008 SP2 and Windows Server 2012 allows an attacker to execute arbitrary code in the context of the current user due to Internet Explorer improperly accessing objects in memory, aka "Internet Explorer Memory Corruption Vulnerability".

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.6 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5microsoft_corporation/internet_explorerMicrosoft Windows Server 2008 SP2 and Windows Server 2012.

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-vx9m-xxv7-7374: Internet Explorer in Microsoft Windows Server 2008 SP2 and Windows Server 2012 allows an attacker to execute arbitrary code in the context of the curr↗2022-05-17
▶
CVEList
CVE-2017-8651: Internet Explorer in Microsoft Windows Server 2008 SP2 and Windows Server 2012 allows an attacker to execute arbitrary code in the context of the curr↗2017-08-08
▶

📋Vendor Advisories

1
Microsoft
Internet Explorer Memory Corruption Vulnerability↗2017-08-08
▶

🕵️Threat Intelligence

3
Unit42
Palo Alto Networks Unit 42 Vulnerability Research August 2017 Disclosures↗2017-08-18
▶
Unit42
Palo Alto Networks Unit 42 Vulnerability Research August 2017 Disclosures↗2017-08-18
▶
Talos
Microsoft Patch Tuesday - August 2017↗2017-08-08
▶
CVE-2017-8651 — HIGH severity | cvebase