QwikSec

Security Database

CVE

CWE

Training

CVE-2017-0201

Published: Apr 12, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

A remote code execution vulnerability exists in Internet Explorer in the way that the JScript and VBScript engines render when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0093.

Vendor	Product	Versions
Microsoft Corporation	Internet Explorer	affected `The Jscript and VBScript engine in Microsoft Internet Explorer 9 and Internet Explorer 10`

References

vdb-entry

x_refsource_BID

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0201

x_refsource_CONFIRM

vdb-entry

x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.