Lucene search

[email protected]CVE-2017-0224

HistoryMay 12, 2017 - 2:29 p.m.

CVE-2017-0224

2017-05-1214:29:00

CWE-119

[email protected]

web.nvd.nist.gov

In Wild

cve-2017-0224

remote code execution

microsoft edge

javascript engine

memory corruption

vulnerability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.12 Low

EPSS

Percentile

95.3%

JSON

A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft Edge, aka “Scripting Engine Memory Corruption Vulnerability.” This CVE ID is unique from CVE-2017-0228, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236, and CVE-2017-0238.

VendorProductVersionCPE
microsoft corporationedgeWindows 10 Version 1703 for 32-bit Systems and Windows 10 Version 1703 for x64-based Systems.cpe:2.3:a:microsoft corporation:edge:Windows 10 Version 1703 for 32-bit Systems and Windows 10 Version 1703 for x64-based Systems.:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft corporation	edge	Windows 10 Version 1703 for 32-bit Systems and Windows 10 Version 1703 for x64-based Systems.	cpe:2.3:a:microsoft corporation:edge:Windows 10 Version 1703 for 32-bit Systems and Windows 10 Version 1703 for x64-based Systems.:::::::*