CVE-2017-0009

CVE-2017-0009: vulnerability in Microsoft Corporation Browser

Published 17 Mar 2017 · Updated 05 Aug 2024

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

15Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 40%

Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0011, CVE-2017-0017, CVE-2017-0065, and CVE-2017-0068.

Affected products

Microsoft Corporation · Browser

Related CVEs — Microsoft Corporation Browser

In the same product, most dangerous first.

CVE-2017-0070—CVE-2017-0070EPSS 78.5%CVE-2017-0141—CVE-2017-0141EPSS 48.2%CVE-2017-0071—CVE-2017-0071EPSS 31.9%CVE-2017-0094—CVE-2017-0094EPSS 31.7%CVE-2017-0010—CVE-2017-0010EPSS 27.1%CVE-2017-0134—CVE-2017-0134EPSS 26.4%

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0009 http://www.security-assessment.com/files/documents/advisory/comparestring_infoleak.pdf http://www.securityfocus.com/bid/96077 http://www.securitytracker.com/id/1038006