CVE-2017-0033

Description

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka Microsoft Browser Spoofing Vulnerability. This vulnerability is different from those described in CVE-2017-0012 and CVE-2017-0069.

Risk Information

Base Score
4.4
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
10.334

Associated Vulnerability

VulnerabilityOS Platform
Microsoft Browser Spoofing Vulnerability for Windows Server 2016 for x64-based Systems (KB4013429) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4013429) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1607 (KB4013429) - CumulativeWindows
Internet Explorer Information Disclosure Vulnerability for Internet Explorer 10 for Windows Server 2012 (KB4012204) - CumulativeWindows
Internet Explorer Information Disclosure Vulnerability for Internet Explorer 11 for Windows Server 2012 R2 (KB4012204) - CumulativeWindows
Internet Explorer Information Disclosure Vulnerability for Internet Explorer 11 for Windows 8.1 (KB4012204) - CumulativeWindows
Internet Explorer Information Disclosure Vulnerability for Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems (KB4012204) - CumulativeWindows
Internet Explorer Information Disclosure Vulnerability for Internet Explorer 11 for Windows 7 for x64-based Systems (KB4012204) - CumulativeWindows
Internet Explorer Information Disclosure Vulnerability for Internet Explorer 11 for Windows 7 (KB4012204) - CumulativeWindows
Internet Explorer Information Disclosure Vulnerability for Internet Explorer 9 for Windows Server 2008 for x64-based Systems (KB4012204) - CumulativeWindows
Internet Explorer Information Disclosure Vulnerability for Internet Explorer 9 for Windows Vista for x64-based Systems (KB4012204) - CumulativeWindows
Internet Explorer Information Disclosure Vulnerability for Internet Explorer 9 for Windows Vista (KB4012204) - CumulativeWindows
Internet Explorer Information Disclosure Vulnerability for Internet Explorer 11 for Windows 8.1 for x64-based Systems (KB4012204) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 for x64-based Systems (KB4012606) - CumulativeWindows
Internet Explorer Information Disclosure Vulnerability for Windows Server 2012 R2- WannaCrypt Ransomware Worm(KB4012216)Windows
Internet Explorer Information Disclosure Vulnerability for Windows 8.1 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012216)Windows
Internet Explorer Information Disclosure Vulnerability for Windows 8.1 - WannaCrypt Ransomware Worm(KB4012216)Windows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1511 for x64-based Systems (KB4013198) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1511 (KB4013198) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 (KB4012606)Windows
Internet Explorer Information Disclosure Vulnerability for Internet Explorer 9 for Windows Server 2008 (KB4012204)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-22054Cumulative Update for Windows Server 2016 for x64-based Systems (KB4013429)
PATCH-22053Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4013429)
PATCH-22052Cumulative Update for Windows 10 Version 1607 (KB4013429)
PATCH-22038Cumulative Security Update for Internet Explorer 10 for Windows Server 2012 (KB4012204)
PATCH-22039Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 (KB4012204)
PATCH-22032Cumulative Security Update for Internet Explorer 11 for Windows 8.1 (KB4012204)
PATCH-22036Cumulative Security Update for Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems (KB4012204)
PATCH-22031Cumulative Security Update for Internet Explorer 11 for Windows 7 (KB4012204)
PATCH-22033Cumulative Security Update for Internet Explorer 9 for Windows Vista for x64-based Systems (KB4012204)
PATCH-22029Cumulative Security Update for Internet Explorer 9 for Windows Vista (KB4012204)
PATCH-22037Cumulative Security Update for Internet Explorer 11 for Windows 8.1 for x64-based Systems (KB4012204)
PATCH-22049Cumulative Update for Windows 10 for x64-based Systems (KB4012606)
PATCH-22149March, 2017 Security Monthly Quality Rollup for Windows Server 2012 R2- WannaCrypt Ransomware Worm(KB4012216)
PATCH-22148March, 2017 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012216)
PATCH-22047March, 2017 Security Monthly Quality Rollup for Windows 8.1 - WannaCrypt Ransomware Worm(KB4012216)
PATCH-22051Cumulative Update for Windows 10 Version 1511 for x64-based Systems (KB4013198)
PATCH-22050Cumulative Update for Windows 10 Version 1511 (KB4013198)
PATCH-22048Cumulative Update for Windows 10 (KB4012606)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234