Lucene search

CVE-2020-0674

🗓️ 11 Feb 2020 22:14:15Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 13 Media mentions👁 1171 Views🌐 WEB

'Remote code execution vulnerability in Internet Explorer

Reporter	Title	Published	Views	Family All 140
Veracode	Remote Code Execution	12 Feb 202005:22	–	veracode
Veracode	Remote Code Execution (RCE)	12 Feb 202005:22	–	veracode
Veracode	Remote Code Execution	12 Feb 202005:13	–	veracode
Veracode	Remote Code Execution (RCE)	12 Feb 202005:26	–	veracode
Veracode	Remote Code Execution	12 Feb 202009:01	–	veracode
OSV	ChakraCore RCE Vulnerability	24 May 202217:08	–	osv
OSV	ChakraCore RCE Vulnerability	24 May 202217:08	–	osv
OSV	ChakraCore RCE Vulnerability	24 May 202217:08	–	osv
OSV	CVE-2020-0711	11 Feb 202022:15	–	osv
OSV	ChakraCore RCE Vulnerability	24 May 202217:08	–	osv

Nvd

Node

microsoft internet_explorerMatch9

AND

microsoft windows_server_2008Match-sp2

Node

microsoft internet_explorerMatch10

AND

microsoft windows_server_2012Match-

Node

microsoft internet_explorerMatch11-

AND

microsoft windows_10Match-

microsoft windows_10Match1607

microsoft windows_10Match1709

microsoft windows_10Match1803

microsoft windows_10Match1809

microsoft windows_10Match1903

microsoft windows_10Match1909

microsoft windows_7Match-sp1

microsoft windows_8.1Match-

microsoft windows_rt_8.1Match-

microsoft windows_server_2008Matchr2sp1x64

microsoft windows_server_2012Match-

microsoft windows_server_2012Matchr2

microsoft windows_server_2019Match-

[
  {
    "product": "Internet Explorer 10",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Windows Server 2012"
      }
    ]
  },
  {
    "product": "Internet Explorer 11",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Windows 10 Version 1803 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1803 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1803 for ARM64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1809 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1809 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1809 for ARM64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows Server 2019"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1709 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1709 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1709 for ARM64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1607 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1607 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows Server 2016"
      },
      {
        "status": "affected",
        "version": "Windows 7 for 32-bit Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows 7 for x64-based Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows 8.1 for 32-bit systems"
      },
      {
        "status": "affected",
        "version": "Windows 8.1 for x64-based systems"
      },
      {
        "status": "affected",
        "version": "Windows RT 8.1"
      },
      {
        "status": "affected",
        "version": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows Server 2012 R2"
      }
    ]
  },
  {
    "product": "Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Internet Explorer 11 on Windows Server 2012",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Internet Explorer 9",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Windows Server 2008 for x64-based Systems Service Pack 2"
      },
      {
        "status": "affected",
        "version": "Windows Server 2008 for 32-bit Systems Service Pack 2"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0674
packetstormsecurity	www.packetstormsecurity.com/files/161309/Microsoft-Internet-Explorer-11-Use-After-Free.html
packetstormsecurity	www.packetstormsecurity.com/files/162565/Microsoft-Internet-Explorer-8-11-Use-After-Free.html
github	www.github.com/maxpl0it/CVE-2020-0674-Exploit
packetstormsecurity	www.packetstormsecurity.com/files/159137/Microsoft-Internet-Explorer-11-Use-After-Free.html

Parameter	Position	Path	Description	CWE
PayloadType	nested	/wpad.dat	CVE-2020-0674 is an exploit targeting a use-after-free vulnerability in Internet Explorer.	CWE-416
CommandStr	nested	/wpad.dat	CVE-2020-0674 is an exploit targeting a use-after-free vulnerability in Internet Explorer.	CWE-416
WindowsVersion	nested	/wpad.dat	CVE-2020-0674 is an exploit targeting a use-after-free vulnerability in Internet Explorer.	CWE-416

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 Feb 2020 22:15Current

7.9High risk

Vulners AI Score7.9

CVSS27.6

CVSS37.5

EPSS0.96889