CVE-2017-11791: Infoleak
First published: Wed Nov 15 2017(Updated: )
ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11834.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Chakra | ||
| Internet Explorer | ||
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows 8.1 | ||
| Microsoft Windows RT | ||
| Microsoft Windows Server | =sp2 | |
| Microsoft Windows Server | =r2-sp1 | |
| Microsoft Windows Server | ||
| Microsoft Windows Server | =r2 | |
| Microsoft Edge Beta | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =1511 | |
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1703 | |
| Microsoft Windows 10 | =1709 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2016 | =1709 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-11791?
CVE-2017-11791 is rated as critical due to its potential to allow remote code execution.
How do I fix CVE-2017-11791?
To fix CVE-2017-11791, apply the latest security updates provided by Microsoft for affected systems.
What systems are affected by CVE-2017-11791?
CVE-2017-11791 affects Microsoft ChakraCore and Internet Explorer across several versions of Windows, including Windows 7 SP1 and various Windows 10 builds.
Can CVE-2017-11791 be exploited remotely?
Yes, CVE-2017-11791 can be exploited remotely, which makes it a serious security concern.
What are the consequences of not addressing CVE-2017-11791?
Not addressing CVE-2017-11791 may result in unauthorized remote control of the affected system, leading to data breaches or system compromises.
- agent/type
- agent/references
- agent/last-modified-date
- agent/first-publish-date
- agent/weakness
- agent/author
- agent/remedy
- agent/severity
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/microsoft chakra
- canonical/internet explorer
- canonical/microsoft windows 7
- version/microsoft windows 7/sp1
- canonical/microsoft windows 8.1
- canonical/microsoft windows rt
- canonical/microsoft windows server
- version/microsoft windows server/sp2
- version/microsoft windows server/r2-sp1
- version/microsoft windows server/r2
- canonical/microsoft edge beta
- canonical/microsoft windows 10
- version/microsoft windows 10/1511
- version/microsoft windows 10/1607
- version/microsoft windows 10/1703
- version/microsoft windows 10/1709
- canonical/microsoft windows server 2016
- version/microsoft windows server 2016/1709