Home

CVE-2017-8529

Description

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to detect specific files on the users computer when affected Microsoft scripting engines do not properly handle objects in memory, aka Microsoft Browser Information Disclosure Vulnerability.

Risk Information

Base Score
5.6
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
22.496

Associated Vulnerability

VulnerabilityOS Platform
Windows Print Spooler Remote Code Execution Vulnerability for Windows Server 2012 R2 for x64-based Systems (KB4038792)Windows
Windows Print Spooler Remote Code Execution Vulnerability for Windows 8.1 for x64-based Systems (KB4038792)Windows
Windows Print Spooler Remote Code Execution Vulnerability for Windows 8.1 for x86-based Systems (KB4038792)Windows
Internet Explorer Spoofing Vulnerability for Windows 7 for x64-based Systems (KB4038777)Windows
Internet Explorer Spoofing Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB4038777)Windows
Internet Explorer Spoofing Vulnerability for Windows 7 for x86-based Systems (KB4038777)Windows
NetBIOS Remote Code Execution Vulnerability for Windows Server 2012 for x64-based Systems (KB4038799)Windows
Internet Explorer Spoofing Vulnerability for Windows 10 Version 1511 for x64-based Systems (KB4038783) - CumulativeWindows
Internet Explorer Spoofing Vulnerability for Windows 10 Version 1511 for x86-based Systems (KB4038783) - CumulativeWindows
NetBIOS Remote Code Execution Vulnerability for Windows Server 2016 for x64-based Systems (KB4038782) - CumulativeWindows
NetBIOS Remote Code Execution Vulnerability for Windows Server 2016 for x64-based Systems (KB4038782) - DeltaWindows
NetBIOS Remote Code Execution Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4038782) - CumulativeWindows
NetBIOS Remote Code Execution Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4038782) - DeltaWindows
NetBIOS Remote Code Execution Vulnerability for Windows 10 Version 1607 for x86-based Systems (KB4038782) - CumulativeWindows
NetBIOS Remote Code Execution Vulnerability for Windows 10 Version 1607 for x86-based Systems (KB4038782) - DeltaWindows
Internet Explorer Spoofing Vulnerability for Windows 10 Version 1507 for x64-based Systems (KB4038781) - CumulativeWindows
Internet Explorer Spoofing Vulnerability for Windows 10 Version 1703 for x64-based Systems (KB4038788) - CumulativeWindows
Internet Explorer Spoofing Vulnerability for Windows 10 Version 1703 for x64-based Systems (KB4038788) - DeltaWindows
Internet Explorer Spoofing Vulnerability for Windows 10 Version 1703 for x86-based Systems (KB4038788) - CumulativeWindows
Internet Explorer Spoofing Vulnerability for Windows 10 Version 1703 for x86-based Systems (KB4038788) - DeltaWindows
Internet Explorer Spoofing Vulnerability for Internet Explorer 10 for Windows Server 2012 (KB4036586) - CumulativeWindows
Internet Explorer Spoofing Vulnerability for Internet Explorer 11 for Windows 8.1 for x64-based Systems (KB4036586) - CumulativeWindows
Internet Explorer Spoofing Vulnerability for Internet Explorer 11 for Windows 8.1 (KB4036586) - CumulativeWindows
Internet Explorer Spoofing Vulnerability for Internet Explorer 11 for Windows 7 for x64-based Systems (KB4036586) - CumulativeWindows
Internet Explorer Spoofing Vulnerability for Internet Explorer 11 for Windows 7 (KB4036586) - CumulativeWindows
Internet Explorer Spoofing Vulnerability for Internet Explorer 9 for Windows Server 2008 x64 Edition (KB4036586) - CumulativeWindows
Internet Explorer Spoofing Vulnerability for Internet Explorer 9 for Windows Server 2008 (KB4036586) - CumulativeWindows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-229932017-09 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB4038792)
PATCH-229922017-09 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems (KB4038792)
PATCH-229912017-09 Security Monthly Quality Rollup for Windows 8.1 for x86-based Systems (KB4038792)
PATCH-229892017-09 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4038777)
PATCH-229902017-09 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4038777)
PATCH-229882017-09 Security Monthly Quality Rollup for Windows 7 for x86-based Systems (KB4038777)
PATCH-229942017-09 Security Monthly Quality Rollup for Windows Server 2012 for x64-based Systems (KB4038799)
PATCH-23008Cumulative Update for Windows 10 Version 1511 for x64-based Systems (KB4038783)
PATCH-23007Cumulative Update for Windows 10 Version 1511 for x86-based Systems (KB4038783)
PATCH-23011Cumulative Update for Windows Server 2016 for x64-based Systems (KB4038782)
PATCH-23014Delta Update for Windows Server 2016 for x64-based Systems (KB4038782)
PATCH-23010Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4038782)
PATCH-23013Delta Update for Windows 10 Version 1607 for x64-based Systems (KB4038782)
PATCH-23009Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB4038782)
PATCH-23012Delta Update for Windows 10 Version 1607 for x86-based Systems (KB4038782)
PATCH-23006Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB4038781)
PATCH-23036Cumulative Security Update for Internet Explorer 10 for Windows Server 2012 (KB4036586)
PATCH-23039Cumulative Security Update for Internet Explorer 11 for Windows 8.1 (KB4036586)
PATCH-23037Cumulative Security Update for Internet Explorer 11 for Windows 7 (KB4036586)
PATCH-23035Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 x64 Edition (KB4036586)
PATCH-23034Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 (KB4036586)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234