Multiple vulnerabilities in Microsoft Edge and Internet Explorer

Beschreibung

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer and Microsoft Edge. Malicious users can exploit these vulnerabilities to to gain privileges, execute arbitrary code, bypass security restrictions and obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An improper handling of objects in memory in Microsoft browsers can be exploited remotely via a specially designed website to execute arbitrary code;
2. An incorrect access to objects in memory in Microsoft Edge can be exploited remotely via a specially designed website to execute arbitrary code;
3. An improper handling of objects in memory in the JScript and VBScript engines in Internet Explorer can be exploited remotely via a specially crafted website to execute arbitrary code;
4. An incorrect access to objects in memory in Internet Explorer can be exploited remotely via a specially designed website to execute arbitrary code;
5. An improper validation of documents in Microsoft Edge Content Security Policy can be exploited remotely via certain specially designed documents to trick a user into loading a web page with malicious content;
6. An incorrect handling of objects in memory in the Chakra scripting engine can be exploited remotely via a specially designed website to obtain sensitive information;
7. An improper enforcing of cross-domain policies in Internet Explorer can be exploited remotely via a specially designed website to gain privileges.

Ursprüngliche Informationshinweise

• CVE-2017-0205

• CVE-2017-0203
• CVE-2017-0202
• CVE-2017-0201
• CVE-2017-0200
• CVE-2017-0093
• CVE-2017-0208
• CVE-2017-0210
• CVE-2017-0093
• CVE-2017-0200
• CVE-2017-0201
• CVE-2017-0202
• CVE-2017-0203
• CVE-2017-0205
• CVE-2017-0208
• CVE-2017-0210

CVE Liste

• CVE-2017-0093
  critical
• CVE-2017-0200
  critical
• CVE-2017-0201
  critical
• CVE-2017-0202
  critical
• CVE-2017-0203
  critical
• CVE-2017-0205
  critical
• CVE-2017-0208
  critical
• CVE-2017-0210
  critical

KB Liste

• 4015549
• 4015550
• 4015221
• 4014661
• 4015551
• 4015219
• 4015217
• 4015583

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com