PT-2017-2922 · Microsoft · Windows Server 2016+8
Publicado
2017-09-12
·
Atualizado
2017-09-18
·
CVE-2017-8750
CVSS v2.0
7.6
Alta
| Vetor | AV:N/AC:H/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Internet Explorer versions prior to the fixed version
Microsoft Edge versions prior to the fixed version
Microsoft Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2
Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
Description
The issue is related to the incorrect handling of objects in memory by Microsoft browsers, which can lead to memory corruption. This can allow a remote attacker to execute arbitrary code in the context of the current user by using specially crafted content that causes memory damage when loaded. The vulnerability is related to the way Microsoft browsers access objects in memory.
Recommendations
For Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, update to a version that includes the fix for this issue.
For Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016, update to a version that includes the fix for this issue.
As a temporary workaround, consider restricting access to sensitive resources and implementing additional security measures to minimize the risk of exploitation.
Correção
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Edge
Internet Explorer
Windows 10
Windows 7
Windows 8.1
Windows Rt 8.1
Windows Server 2008 R2
Windows Server 2012 R2
Windows Server 2016