Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0011, CVE-2017-0017, CVE-2017-0065, and CVE-2017-0068.
References
| Link | Resource |
|---|---|
| http://www.security-assessment.com/files/documents/advisory/comparestring_infoleak.pdf | |
| http://www.securityfocus.com/bid/96077 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1038006 | |
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0009 | Patch Vendor Advisory |
| http://www.security-assessment.com/files/documents/advisory/comparestring_infoleak.pdf | |
| http://www.securityfocus.com/bid/96077 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1038006 | |
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0009 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.security-assessment.com/files/documents/advisory/comparestring_infoleak.pdf - | |
| References | () http://www.securityfocus.com/bid/96077 - Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id/1038006 - | |
| References | () https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0009 - Patch, Vendor Advisory |
Information
Published : 2017-03-17 00:59
Updated : 2025-04-20 01:37
NVD link : CVE-2017-0009
Mitre link : CVE-2017-0009
CVE.ORG link : CVE-2017-0009
JSON object : View
Products Affected
microsoft
- internet_explorer
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor