CVE-2017-11887 - CVE House

Back to Database

Status published Medium CVE-2017-11887

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008...

5.3 CVSS

Vulnerability Description

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how Internet Explorer handle objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11906 and CVE-2017-11919.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-11887

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Microsoft Corporation

View All →

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2,...

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2,...

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2,...

The Windows kernel in Windows 7 SP1 and Windows Server...

Windows Storage Services in Windows 10 versions 1511, 1607, 1703...

Affected Vendor

Microsoft Corporation

View all reports →

Affected Software

Internet Explorer

Vulnerable Versions:

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.

Timeline

Official Publish: December 12th, 2017

Last Modified: September 16th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.