CVE-2017-0093

Опубликовано: 12 апр. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 7.6

EPSS Средний

Описание

A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when handling objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0201.

Ссылки

http://www.securityfocus.com/bid/97419
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038234
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0093
Patch
Vendor Advisory
http://www.securityfocus.com/bid/97419
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038234
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0093
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.21418

Средний

7.5 High

CVSS3

7.6 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2017-0093

CVSS3: 4.2

msrc

около 8 лет назад

Scripting Engine Memory Corruption Vulnerability

GHSA-vx6c-j786-5wrq