CVE-2017-11839: Buffer Overflow
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affected system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873.
Affected Software
Remediation
Event History
Frequently Asked Questions
Which systems are affected?
Affected systems are Windows 10 Gold, 1511, 1607, 1703, and 1709, plus Windows Server 2016 and Windows Server version 1709, when Microsoft Edge is present.
What does an attacker need to exploit this issue?
The CVSS vector indicates network access is possible without privileges, but exploitation has high attack complexity and requires user interaction. An attacker would need to induce a user to interact with attacker-controlled content processed by the Edge scripting engine.
What is the potential impact of successful exploitation?
A successful attacker could take control of the affected system. The CVSS rating indicates high impact to confidentiality, integrity, and availability.
What should administrators do?
Apply the available patch for CVE-2017-11839. This issue is distinct from the other listed Microsoft Edge CVEs and should be tracked and remediated under its own CVE identifier.