CVE-2017-8750: Buffer Overflow
First published: Wed Sep 13 2017(Updated: )
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption Vulnerability".
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Internet Explorer | =11 | |
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows | ||
| Microsoft Windows RT | ||
| Microsoft Windows Server | =r2-sp1 | |
| Microsoft Windows Server | =r2 | |
| Microsoft Edge Beta | ||
| Windows 10 | ||
| Windows 10 | =1511 | |
| Windows 10 | =1607 | |
| Windows 10 | =1703 | |
| Microsoft Windows Server 2016 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-8750?
CVE-2017-8750 is categorized as a critical vulnerability that allows attackers to execute arbitrary code.
How do I fix CVE-2017-8750?
To fix CVE-2017-8750, ensure that you apply the latest security updates from Microsoft for Internet Explorer and affected Windows versions.
Which versions are affected by CVE-2017-8750?
CVE-2017-8750 affects Internet Explorer 11 and certain versions of Windows including Windows 7 SP1 and Windows 10.
What does CVE-2017-8750 allow an attacker to do?
CVE-2017-8750 allows an attacker to execute arbitrary code in the context of the current user.
Is there a workaround for CVE-2017-8750?
No official workaround exists for CVE-2017-8750 other than applying security updates to mitigate the risk.
- agent/references
- agent/type
- agent/severity
- agent/author
- agent/weakness
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- vendor/microsoft
- canonical/internet explorer
- version/internet explorer/11
- canonical/microsoft windows 7
- version/microsoft windows 7/sp1
- canonical/microsoft windows
- canonical/microsoft windows rt
- canonical/microsoft windows server
- version/microsoft windows server/r2-sp1
- version/microsoft windows server/r2
- canonical/microsoft edge beta
- canonical/windows 10
- version/windows 10/1511
- version/windows 10/1607
- version/windows 10/1703
- canonical/microsoft windows server 2016