CVE-2017-8602: Input Validation
Microsoft browsers on Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a spoofing vulnerability in the way they parse HTTP content, aka "Microsoft Browser Spoofing Vulnerability."
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-8602?
CVE-2017-8602 is rated as important in severity due to its potential for exploitation through spoofing in Microsoft browsers.
How do I fix CVE-2017-8602?
To mitigate CVE-2017-8602, it is recommended to apply the security updates provided by Microsoft for the affected versions of Internet Explorer and Microsoft Edge.
Which Microsoft products are affected by CVE-2017-8602?
CVE-2017-8602 affects Microsoft Edge and Internet Explorer running on various Windows operating systems including Windows 7 SP1, Windows 8.1, and Windows 10.
Can CVE-2017-8602 be exploited remotely?
Yes, CVE-2017-8602 can be exploited remotely via malicious web content that targets users of the affected browsers.
Is there a workaround for CVE-2017-8602?
While the best solution for CVE-2017-8602 is to apply security updates, users can also minimize exposure by avoiding untrusted sites and disabling scripts in their browsers.