CVE-2017-8529CWE-119

CVE-2017-8529

Medium · published June 15, 2017

CVSS v3.1
6.5
EPSS
14%
Percentile
96.6
In the wild
Unconfirmed
What it is

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to detect specific files on the user's computer when affected Microsoft scripting engines do not properly handle objects in memory, aka "Microsoft Browser Information Disclosure Vulnerability".

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.14203 · 96.6th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2017-06-15T05:29Z
Affected products (4)
ProductVersionsFixed in
microsoft/internet_explorerall versions—
microsoft/edgeall versions—
microsoft/internet_explorerall versions—
microsoft/internet_explorerall versions—
References (4)
http://www.securityfocus.com/bid/98953 · [email protected]https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8529 · [email protected]http://www.securityfocus.com/bid/98953 · af854a3a-2127-422b-91ae-364da2661108https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8529 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 15 JUN 01:00Z
    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to…
    cvelistv5