Microsoft Scripting Engine CVE-2017-8618 Memory Corruption Vulnerability

description-logoDescription

A remote code execution vulnerability exists in the way that the VBScript engine, when rendered in Internet Explorer, handles objects in memory. In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit this vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked safe for initialization in an application or Microsoft Office document that hosts the Internet Explorer rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit this vulnerability.

affected-products-logoAffected Applications

Internet Explorer 10
Internet Explorer 11
Internet Explorer 9

CVE References

CVE-2017-8618