Home

CVE-2017-0231

Description

A spoofing vulnerability exists when Microsoft browsers render SmartScreen Filter, aka Microsoft Browser Spoofing Vulnerability.

Risk Information

Base Score
4.2
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
8.539

Associated Vulnerability

VulnerabilityOS Platform
Microsoft Browser Spoofing Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB4019264) - Petya ransomware attack (CVE-2017-0199)Windows
Microsoft Browser Spoofing Vulnerability for Windows 7 for x64-based Systems (KB4019264) - Petya ransomware attack (CVE-2017-0199)Windows
Microsoft Browser Spoofing Vulnerability for Windows 7 for x86 (KB4019264) - Petya ransomware attack (CVE-2017-0199) Windows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1703 for x64-based Systems - WannaCrypt Ransomware Fix(KB4016871) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1703 for x86-based Systems - WannaCrypt Ransomware Fix(KB4016871) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows Server 2016 for x64-based Systems (KB4019472) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4019472) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1607 for x86-based Systems (KB4019472) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Internet Explorer 10 for Windows Server 2012 (KB4018271) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Internet Explorer 11 for Windows Server 2012 R2 (KB4018271) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Internet Explorer 11 for Windows 8.1 for x64-based Systems (KB4018271) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Internet Explorer 11 for Windows 8.1 (KB4018271) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems (KB4018271) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Internet Explorer 11 for Windows 7 for x64-based Systems (KB4018271) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Internet Explorer 11 for Windows 7 (KB4018271) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Internet Explorer 9 for Windows Server 2008 x64 Edition (KB4018271) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Internet Explorer 9 for Windows Server 2008 (KB4018271) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1511 for x64-based Systems (KB4019473) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1511 (KB4019473) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows Server 2012 R2 for x64-based Systems (KB4019215)Windows
Microsoft Browser Spoofing Vulnerability for Windows 8.1 for x64-based Systems (KB4019215)Windows
Microsoft Browser Spoofing Vulnerability for Windows 8.1 for x86-based Systems (KB4019215)Windows
Microsoft Browser Spoofing Vulnerability for Windows 10 for x64-based Systems (KB4019474) - CumulativeWindows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-224932017-05 Security Monthly Quality Rollup Update includes WannaCrypt Fix(MS17-010) and May Month Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4019264) - Petya ransomware attack (CVE-2017-0199)
PATCH-224922017-05 Security Monthly Quality Rollup Update includes WannaCrypt Fix(MS17-010) and May Month Quality Rollup for Windows 7 for x64-based Systems (KB4019264) - Petya ransomware attack (CVE-2017-0199)
PATCH-224912017-05 Security Monthly Quality Rollup Update includes WannaCrypt Fix(MS17-010) and May Month Quality Rollup for Windows 7 for x86 (KB4019264) - Petya ransomware attack (CVE-2017-0199)
PATCH-225092017-05 Cumulative Update and WannaCrypt Ransomware Fix(MS17-007) for Windows Server 2016 for x64-based Systems (KB4019472)
PATCH-225082017-05 Cumulative Update and WannaCrypt Ransomware Fix(MS17-007) for Windows 10 Version 1607 for x64-based Systems (KB4019472)
PATCH-225072017-05 Cumulative Update and WannaCrypt Ransomware Fix(MS17-007) for Windows 10 Version 1607 for x86-based Systems (KB4019472)
PATCH-22470Cumulative Security Update for Internet Explorer 10 for Windows Server 2012 (KB4018271)
PATCH-22472Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 (KB4018271)
PATCH-22466Cumulative Security Update for Internet Explorer 11 for Windows 8.1 (KB4018271)
PATCH-22469Cumulative Security Update for Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems (KB4018271)
PATCH-22465Cumulative Security Update for Internet Explorer 11 for Windows 7 (KB4018271)
PATCH-22467Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 x64 Edition (KB4018271)
PATCH-22464Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 (KB4018271)
PATCH-22346Cumulative Update and and WannaCrypt Ransomware Fix(MS17-007) for Windows 10 Version 1511 for x64-based Systems (KB4019473)
PATCH-22345Cumulative Update and WannaCrypt Ransomware Fix(MS17-007) for Windows 10 Version 1511 (KB4019473)
PATCH-224962017-05 Security Monthly Quality Rollup Update includes WannaCrypt Fix(MS17-010) and May Month Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB4019215)
PATCH-224952017-05 Security Monthly Quality Rollup Update includes WannaCrypt Fix(MS17-010) and May Month Quality Rollup for Windows 8.1 for x64-based Systems (KB4019215)
PATCH-224942017-05 Security Monthly Quality Rollup Update includes WannaCrypt Fix(MS17-010) and May Month Quality Rollup for Windows 8.1 for x86-based Systems (KB4019215)
PATCH-22344Cumulative Update and WannaCrypt Ransomware Fix(MS17-007) for Windows 10 for x64-based Systems (KB4019474)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234