3.1

CVE-2017-11791

ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11834.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Chakracore
   Microsoft ≫ Windows 7 Update sp1
   Microsoft ≫ Windows 8.1
   Microsoft ≫ Windows Rt 8.1
   Microsoft ≫ Windows Server 2008 Update sp2
   Microsoft ≫ Windows Server 2008 Version r2 Update sp1
   Microsoft ≫ Windows Server 2012
   Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ Internet Explorer
   Microsoft ≫ Windows 7 Update sp1
   Microsoft ≫ Windows 8.1
   Microsoft ≫ Windows Rt 8.1
   Microsoft ≫ Windows Server 2008 Update sp2
   Microsoft ≫ Windows Server 2008 Version r2 Update sp1
   Microsoft ≫ Windows Server 2012
   Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ Edge
   Microsoft ≫ Windows 10
   Microsoft ≫ Windows 10 Version 1511
   Microsoft ≫ Windows 10 Version 1607
   Microsoft ≫ Windows 10 Version 1703
   Microsoft ≫ Windows 10 Version 1709
   Microsoft ≫ Windows Server 2016
   Microsoft ≫ Windows Server 2016 Version 1709
Microsoft ≫ Internet Explorer
   Microsoft ≫ Windows 10
   Microsoft ≫ Windows 10 Version 1511
   Microsoft ≫ Windows 10 Version 1607
   Microsoft ≫ Windows 10 Version 1703
   Microsoft ≫ Windows 10 Version 1709
   Microsoft ≫ Windows Server 2016
   Microsoft ≫ Windows Server 2016 Version 1709
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.49% 0.918
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.1 1.6 1.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
NIST 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.securityfocus.com/bid/101715
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039796
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039797
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11791
Patch
Vendor Advisory