CVE-2017-11822: Buffer Overflow

Published Oct 13, 2017

Updated

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka "Internet Explorer Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11813.

Affected Software

12 affected components

Microsoft Internet Explorer=11

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11822

Event History

Oct 13, 2017

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-11822?

CVE-2017-11822 has a severity rating of critical due to the potential for arbitrary code execution.

How do I fix CVE-2017-11822?

To mitigate CVE-2017-11822, ensure that your Microsoft Internet Explorer is updated to the latest version.

Which versions of Windows are affected by CVE-2017-11822?

CVE-2017-11822 affects Windows 7 SP1, Windows 8.1, Windows 10 (certain versions), and various Windows Server editions.

What type of attack can exploit CVE-2017-11822?

CVE-2017-11822 can be exploited through web-based attacks, allowing an attacker to execute arbitrary code.

Is there a known workaround for CVE-2017-11822?

There are no recommended workarounds for CVE-2017-11822; applying the security update is the best mitigation.