CVE-2017-11791: Infoleak
ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11834.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-11791?
CVE-2017-11791 is rated as critical due to its potential to allow remote code execution.
How do I fix CVE-2017-11791?
To fix CVE-2017-11791, apply the latest security updates provided by Microsoft for affected systems.
What systems are affected by CVE-2017-11791?
CVE-2017-11791 affects Microsoft ChakraCore and Internet Explorer across several versions of Windows, including Windows 7 SP1 and various Windows 10 builds.
Can CVE-2017-11791 be exploited remotely?
Yes, CVE-2017-11791 can be exploited remotely, which makes it a serious security concern.
What are the consequences of not addressing CVE-2017-11791?
Not addressing CVE-2017-11791 may result in unauthorized remote control of the affected system, leading to data breaches or system compromises.