Kaspersky LabKLA11058KLA11058 Multiple vulnerabilities in Microsoft Edge and Internet Explorer
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.893 High
EPSS
Percentile
98.7%
Detect date:
04/11/2017
Severity:
Critical
Description:
Multiple serious vulnerabilities have been found in Microsoft Internet Explorer and Microsoft Edge. Malicious users can exploit these vulnerabilities to to gain privileges, execute arbitrary code, bypass security restrictions and obtain sensitive information.
Affected products:
Microsoft Edge
Microsoft Internet Explorer versions 9 through 11
Solution:
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories:
CVE-2017-0205
CVE-2017-0203
CVE-2017-0202
CVE-2017-0201
CVE-2017-0200
CVE-2017-0093
CVE-2017-0208
CVE-2017-0210
CVE-2017-0093
CVE-2017-0200
CVE-2017-0201
CVE-2017-0202
CVE-2017-0203
CVE-2017-0205
CVE-2017-0208
CVE-2017-0210
Impacts:
ACE
Related products:
CVE-IDS:
CVE-2017-00937.6Critical
CVE-2017-02007.6Critical
CVE-2017-02017.6Critical
CVE-2017-02027.6Critical
CVE-2017-02034.3Warning
CVE-2017-02057.6Critical
CVE-2017-02084.3Warning
CVE-2017-02104.3Warning
Microsoft official advisories:
KB list:
4015549
4015550
4015221
4014661
4015551
4015219
4015217
4015583
Exploitation:
Public exploits exist for this vulnerability.
References
support.microsoft.com/kb/4014661
support.microsoft.com/kb/4015217
support.microsoft.com/kb/4015219
support.microsoft.com/kb/4015221
support.microsoft.com/kb/4015549
support.microsoft.com/kb/4015550
support.microsoft.com/kb/4015551
support.microsoft.com/kb/4015583
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0093
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0200
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0201
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0202
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0203
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0205
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0208
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0210
portal.msrc.microsoft.com/en-us/security-guidance
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0093
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0093
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0200
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0200
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0201
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0201
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0202
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0202
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0203
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0203
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0205
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0205
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0208
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0208
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0210
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0210
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/product/Microsoft-Edge/
threats.kaspersky.com/en/product/Microsoft-Internet-Explorer/
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.893 High
EPSS
Percentile
98.7%