First published: Tue Jul 11 2017(Updated: )
Microsoft browsers in Microsoft Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8598, CVE-2017-8596, CVE-2017-8610, CVE-2017-8601, CVE-2017-8618, CVE-2017-8619, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8595, CVE-2017-8606, CVE-2017-8607, and CVE-2017-8609
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Edge | ||
Internet Explorer | =9 | |
Internet Explorer | =10 | |
Internet Explorer | =11 | |
Microsoft Windows 10 | ||
Microsoft Windows 10 | =1511 | |
Microsoft Windows 10 | =1607 | |
Microsoft Windows 10 | =1703 | |
Microsoft Windows 8.1 | ||
Microsoft Windows RT | ||
Microsoft Windows Server 2008 Itanium | =sp2 | |
Microsoft Windows Server 2012 x64 | ||
Microsoft Windows Server 2012 x64 | =r2 | |
Microsoft Windows Server 2016 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-8608 has a critical severity rating due to its potential to allow execution of arbitrary code.
To fix CVE-2017-8608, update your Microsoft Edge or Internet Explorer browser to the latest version provided by Microsoft.
CVE-2017-8608 affects Microsoft Edge and various versions of Internet Explorer, as well as Windows Server 2008, Windows 8.1, and several Windows 10 releases.
CVE-2017-8608 can facilitate remote code execution attacks, allowing attackers to execute code in the context of the current user.
While applying the latest updates is the recommended approach, temporary workarounds may include disabling JavaScript in the browser settings.