Количество 4
Количество 4

CVE-2017-0037
Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary code via vectors involving a crafted Cascading Style Sheets (CSS) token sequence and crafted JavaScript code that operates on a TH element.

CVE-2017-0037
Microsoft Browser Memory Corruption Vulnerability
GHSA-xpg5-jv85-754h
Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary code via vectors involving a crafted Cascading Style Sheets (CSS) token sequence and crafted JavaScript code that operates on a TH element.

BDU:2017-01471
Уязвимость библиотеки mshtml.dll браузеров Internet Explorer и Microsoft Edge , позволяющая нарушителю выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
![]() | CVE-2017-0037 Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary code via vectors involving a crafted Cascading Style Sheets (CSS) token sequence and crafted JavaScript code that operates on a TH element. | CVSS3: 8.1 | 92% Критический | больше 8 лет назад |
![]() | CVE-2017-0037 Microsoft Browser Memory Corruption Vulnerability | CVSS3: 6.4 | 92% Критический | больше 8 лет назад |
GHSA-xpg5-jv85-754h Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary code via vectors involving a crafted Cascading Style Sheets (CSS) token sequence and crafted JavaScript code that operates on a TH element. | CVSS3: 8.1 | 92% Критический | больше 3 лет назад | |
![]() | BDU:2017-01471 Уязвимость библиотеки mshtml.dll браузеров Internet Explorer и Microsoft Edge , позволяющая нарушителю выполнить произвольный код | CVSS2: 7.6 | 92% Критический | больше 8 лет назад |
Уязвимостей на страницу