CVE-2017-11887: Infoleak
First published: Tue Dec 12 2017(Updated: )
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how Internet Explorer handle objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11906 and CVE-2017-11919.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Internet Explorer | =11 | |
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =1511 | |
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1703 | |
| Microsoft Windows 10 | =1709 | |
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows 8.1 | ||
| Microsoft Windows Server 2008 Itanium | =r2-sp1 | |
| Microsoft Windows Server 2012 x64 | =r2 | |
| Microsoft Windows Server 2016 | ||
| Internet Explorer | =9 | |
| Microsoft Windows Server 2008 Itanium | =sp2 | |
| Internet Explorer | =10 | |
| Microsoft Windows Server 2012 x64 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-11887?
CVE-2017-11887 has a high severity rating due to its potential to allow attackers to gain sensitive information and compromise users' systems.
How do I fix CVE-2017-11887?
To fix CVE-2017-11887, install the latest security updates provided by Microsoft for affected versions of Internet Explorer and Windows.
What systems are affected by CVE-2017-11887?
CVE-2017-11887 affects Microsoft Internet Explorer versions 9, 10, and 11, and various versions of Windows including 7 SP1, 8.1, 10, and Windows Server editions.
Can CVE-2017-11887 be exploited remotely?
Yes, CVE-2017-11887 can potentially be exploited remotely by an attacker to obtain sensitive information.
What are the potential consequences of CVE-2017-11887 exploitation?
Exploitation of CVE-2017-11887 could lead to unauthorized access to sensitive data, further compromising the security of the affected system.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/weakness
- agent/author
- agent/remedy
- agent/references
- agent/severity
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/internet explorer
- version/internet explorer/11
- canonical/microsoft windows 10
- version/microsoft windows 10/1511
- version/microsoft windows 10/1607
- version/microsoft windows 10/1703
- version/microsoft windows 10/1709
- canonical/microsoft windows 7
- version/microsoft windows 7/sp1
- canonical/microsoft windows 8.1
- canonical/microsoft windows server 2008 itanium
- version/microsoft windows server 2008 itanium/r2-sp1
- canonical/microsoft windows server 2012 x64
- version/microsoft windows server 2012 x64/r2
- canonical/microsoft windows server 2016
- version/internet explorer/9
- version/microsoft windows server 2008 itanium/sp2
- version/internet explorer/10