Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2017-11791
HistoryNov 15, 2017 - 3:29 a.m.

CVE-2017-11791

2017-11-1503:29:00
CWE-200
[email protected]
web.nvd.nist.gov

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

3.1 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

4.3 Medium

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

86.9%

JSON

ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user’s system, due to how the scripting engine handles objects in memory, aka “Scripting Engine Information Disclosure Vulnerability”. This CVE ID is unique from CVE-2017-11834.

Affected configurations

NVD
Node
microsoftchakracore
OR
microsoftinternet_explorer
AND
microsoftwindows_7sp1
OR
microsoftwindows_8.1
OR
microsoftwindows_rt_8.1
OR
microsoftwindows_server_2008sp2
OR
microsoftwindows_server_2008Matchr2sp1
OR
microsoftwindows_server_2012
OR
microsoftwindows_server_2012Matchr2
Node
microsoftedge
OR
microsoftinternet_explorer
AND
microsoftwindows_10
OR
microsoftwindows_10Match1511
OR
microsoftwindows_10Match1607
OR
microsoftwindows_10Match1703
OR
microsoftwindows_10Match1709
OR
microsoftwindows_server_2016
OR
microsoftwindows_server_2016Match1709

Related

cve 2
cvelist 2
prion 2
nvd 1
symantec 2
mscve 2
checkpoint_advisories 1
veracode 1
openvas 9
nessus 9
mskb 10
kaspersky 2
talosblog 1
trendmicroblog 1
cve
cve
CVE-2017-11834
2017-11-15 03:29:00
CVE-2017-11791
2017-11-15 03:29:00
cvelist
cvelist
CVE-2017-11791
2017-11-14 00:00:00
CVE-2017-11834
2017-11-14 00:00:00
prion
prion
Information disclosure
2017-11-15 03:29:00
Information disclosure
2017-11-15 03:29:00
nvd
nvd
CVE-2017-11834
2017-11-15 03:29:00
symantec
symantec
Microsoft Internet Explorer CVE-2017-11834 Information Disclosure Vulnerability
2017-11-14 00:00:00
Microsoft Internet Explorer and Edge CVE-2017-11791 Information Disclosure Vulnerability
2017-11-14 00:00:00
mscve
mscve
Scripting Engine Information Disclosure Vulnerability
2017-11-14 08:00:00
Scripting Engine Information Disclosure Vulnerability
2017-11-14 08:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Browser Scripting Engine Information Disclosure (CVE-2017-11791)
2017-11-14 00:00:00
veracode
veracode
Information Disclosure
2018-12-11 03:35:02
openvas
openvas
Microsoft Internet Explorer Multiple Vulnerabilities (KB4047206)
2017-11-15 00:00:00
Microsoft Windows Server 2012 Multiple Vulnerabilities (KB4048959)
2017-11-15 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4048958)
2017-11-15 00:00:00
nessus
nessus
Security Updates for Internet Explorer (November 2017)
2017-11-30 00:00:00
Windows 7 and Windows Server 2008 R2 November 2017 Security Updates
2017-11-14 00:00:00
Windows Server 2012 November 2017 Security Updates
2017-11-14 00:00:00
mskb
mskb
Cumulative security update for Internet Explorer: November 14, 2017
2017-11-14 08:00:00
November 14, 2017—KB4048959 (Monthly Rollup)
2017-11-14 08:00:00
November 14, 2017—KB4048958 (Monthly Rollup)
2017-11-14 08:00:00
kaspersky
kaspersky
KLA11855 Multiple vulnerabilities in Microsoft Products (ESU)
2017-11-14 00:00:00
KLA11140 Multiple vulnerabilities in Microsoft Edge and Internet Explorer
2017-11-14 00:00:00
talosblog
talosblog
Microsoft Patch Tuesday - November 2017
2017-11-14 11:54:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of November 13, 2017
2017-11-17 16:46:19

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

3.1 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

4.3 Medium

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

86.9%

JSON
Related for NVD:CVE-2017-11791
cve2cvelist2prion2nvd1symantec2mscve2checkpoint_advisories1veracode1openvas9nessus9mskb10kaspersky2talosblog1trendmicroblog1