CVE-2017-11903: Buffer Overflow
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how Internet Explorer handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-11903?
CVE-2017-11903 has a critical severity rating, as it allows attackers to gain the same user rights as the current user.
How do I fix CVE-2017-11903?
The best way to fix CVE-2017-11903 is to apply the latest security updates from Microsoft for affected versions of Internet Explorer.
Which systems are affected by CVE-2017-11903?
CVE-2017-11903 affects multiple versions of Internet Explorer and various Microsoft Windows operating systems including Windows 7, 8.1, and some Windows Server editions.
What type of vulnerability is CVE-2017-11903?
CVE-2017-11903 is a privilege escalation vulnerability that exists due to how Internet Explorer handles objects in memory.
Can CVE-2017-11903 be exploited remotely?
Yes, CVE-2017-11903 can potentially be exploited remotely by an attacker through maliciously crafted web content.